MENU
Which of the following can be used to perform session hijacking?
Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: D
Get Premium GPEN Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
44 comments · newest first
DA
Daniel
11 months ago
Not sure about ARP spoofing being related to session hijacking.
FR
Francene
11 months ago
Totally agree with you, Brittni!
CA
Cassie
11 months ago
Wait, session fixation? Really? That's surprising!
JO
Jolanda
12 months ago
I think D is also a valid method.
BR
Brittni
12 months ago
Definitely A, B, and C can be used for session hijacking.
WE
Wei
12 months ago
I practiced a similar question last week, and I think both session sidejacking and session fixation are correct answers.
RO
Rocco
1 year ago
Cross-site scripting sounds familiar in the context of session hijacking, but I can't recall if it's directly related.
MA
Marcelle
1 year ago
I think session sidejacking is definitely a method used for session hijacking, but I'm a bit confused about session fixation.
AR
Arlyne
1 year ago
I remember that session hijacking can involve different techniques, but I'm not sure if ARP spoofing is one of them.
DI
Dion
1 year ago
I'm a bit confused on this one. I know session hijacking is a common attack, but I'm not sure which specific techniques are used. I'll have to carefully consider each of these options and make sure I understand the differences between them.
DE
Derrick
1 year ago
Okay, I've got this. Cross-site scripting, session sidejacking, and session fixation can all be used to perform session hijacking. ARP spoofing is a network-level attack, so that's not the right answer here.
MA
Ma
1 year ago
I'm pretty sure cross-site scripting and session sidejacking can be used for session hijacking, but I'm not sure about the other options. I'll need to think this through carefully.
CA
Candra
1 year ago
Hmm, this is a tricky one. I know session hijacking can be done through cross-site scripting, but I'm not sure about the other choices. I'll have to review my notes on web application security to make sure I get this right.
SU
Sue
1 year ago
I've seen questions like this before. I think the router will accept the update and just ignore the unrecognized attribute. That's my best guess.
DI
Dierdre
1 year ago
Hmm, this is a tough one. I'm torn between Equivalence Partitioning and Boundary Value Analysis. Both seem relevant given the full set of documentation available, but I'll need to think it through carefully.
TA
Tawanna
1 year ago
Hmm, I'm a bit confused on this one. I'll have to review the Cisco UCS boot configuration details again.
GA
Gabriele
1 year ago
I'm feeling pretty confident about this one. Activity-based costing provides much more detailed and accurate cost information compared to traditional methods. This helps management make better decisions.
FE
Felix
1 year ago
Session hijacking? I prefer to hijack my neighbor's Netflix account, much less jail time involved.
AL
Alaine
1 year ago
Cross-site scripting, ARP spoofing, session sidejacking, and session fixation? Looks like a buffet of hacking techniques to me.
CH
Chuck
1 year ago
D) Session fixation
HU
Hubert
1 year ago
C) Session sidejacking
LE
Leana
1 year ago
B) ARP spoofing
AM
Amira
1 year ago
A) Cross-site scripting
MA
Maile
1 year ago
All the answers look legit, but I'm going with the classic - session fixation. It's the one that screams 'I'm a security expert' the loudest.
MA
Mabel
1 year ago
Session hijacking? I'd rather hijack a plane, at least that's a bit more exciting.
MA
Malcom
1 year ago
D) Session fixation
LE
Lemuel
1 year ago
C) Session sidejacking
DO
Donte
1 year ago
B) ARP spoofing
BO
Bobbye
1 year ago
A) Cross-site scripting
LE
Lemuel
1 year ago
D) Session fixation
LE
Leslie
1 year ago
C) Session sidejacking
GO
Goldie
1 year ago
B) ARP spoofing
CE
Ceola
1 year ago
A) Cross-site scripting
LI
Ligia
2 years ago
ARP spoofing and session sidejacking? Sounds like a hacker's dream team!
KE
Keva
1 year ago
It's important to be aware of these techniques to protect against session hijacking attacks.
CH
Charlie
1 year ago
Session fixation is another method that can be used for session hijacking.
DU
Dudley
1 year ago
Session fixation is another method that can be used for session hijacking.
BI
Billy
1 year ago
Cross-site scripting can also be used for session hijacking.
LA
Latosha
1 year ago
Cross-site scripting can also be used for session hijacking.
LI
Lilli
1 year ago
Yes, ARP spoofing and session sidejacking are commonly used by hackers.
TR
Truman
1 year ago
Yes, ARP spoofing and session sidejacking are both commonly used by hackers.
AR
Arminda
2 years ago
I believe D, session fixation, can also be used for session hijacking. It's important to be aware of all possible methods.
CO
Cordelia
2 years ago
I agree with Cortney. Cross-site scripting, ARP spoofing, and session sidejacking are common methods for session hijacking.
CO
Cortney
2 years ago
I think A, B, and C can be used for session hijacking.