WorksheetsCEH M11 Session Hijacking
Total questions: 6
Worksheet time: 3mins
Which of the following is a type of session hijacking attack that targets the session token during communication between the client and the server?
Session Fixation
Man-in-the-Middle (MITM) Attack
Cross-Site Request Forgery (CSRF)
Phishing
What is Session Fixation in the context of session hijacking?
The attacker steals the session ID and uses it to gain unauthorized access to the victim's account
The attacker forces the victim to use a known session ID before login
The attacker intercepts communication to modify the session data
The attacker initiates a brute force attack to guess the session ID
Which of the following is a recommended countermeasure to prevent session hijacking attacks on a web application?
Use of SSL/TLS encryption for all communications
Allowing session IDs to be embedded in the URL for easier tracking
Only storing session IDs in the browser's cookies without secure flags
Disabling all security features in the browser
In session hijacking, which attack involves injecting a malicious script into a website in order to steal a victim's session cookie?
SQL Injection
Cross-Site Scripting (XSS)
DNS Spoofing
Distributed Denial-of-Service (DDoS) Attack
Which of the following forces the victim to use a known session ID before login?
Session Fixation
Man-in-the-Middle (MITM) Attack
Cross-Site Request Forgery (CSRF)
Phishing
What is the purpose of using Secure Cookies and the HttpOnly flag as countermeasures against session hijacking?
To make the session cookie less vulnerable to cross-site scripting (XSS) attacks
To prevent the server from storing any sensitive data
To allow session cookies to be transmitted in an unencrypted manner
To automatically regenerate session IDs after each request
