GCIH: GIAC Certified Incident HandlerDemo

Question

Which of the following statements are accurate regarding session hijacking?

Each correct answer represents a complete solution.

Choose three

A Use of a long random number or string as the session key reduces session hijacking.
B It is used to slow the working of victim's network resources.
C TCP session hijacking is when a hacker takes over a TCP session between two machines.
D It is the exploitation of a valid computer session to gain unauthorized access to information or services in a computer system.

Explanation

Long, random session identifiers reduce the chance that an attacker can predict or brute-force a valid session identifier. Session hijacking is the unauthorized takeover or exploitation of a valid session to access information or services, and TCP session hijacking concerns takeover of an established TCP connection between two machines. Degrading a victim’s network resources is a denial-of-service objective rather than a defining characteristic of session hijacking.

Learn more

GCIH: GIAC Certified Incident HandlerDemo

AstroTutor

Notes

Readiness

QuestionQ50

Community Discussion