Session Hijacking CEH Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a technique used to detect session hijacking attempts?

   • AEncrypting the session ID with a secret key
   • BDisabling all session cookies in the browser
   • CMonitoring for unusual changes in user behavior or IP address during a session
   • DUsing a firewall to block all incoming traffic
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which tool is a web proxy that can be used to intercept and modify HTTP requests to manipulate session tokens?

   • AHydra
   • BWireshark
   • CBurp Suite
   • DAircrack-ng
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A network engineer is troubleshooting a possible TCP session hijack. The engineer notices that the server is receiving RST packets that appear to come from the client, but the client denies sending them. Which countermeasure would be the most effective in preventing this type of attack?

   • AUsing IPsec to authenticate and encrypt all traffic
   • BDisabling TCP timestamps
   • CDeploying an intrusion prevention system (IPS)
   • DIncreasing the TCP sequence number space
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A penetration tester is attempting to hijack a session in a web application that uses a session cookie. The tester has identified a stored XSS vulnerability in the application. The tester wants to steal the session cookie of an administrator. Which technique would be most effective, and what is the primary limitation?

   • AUse a tool like Hamster to replay the cookie; the limitation is that Hamster only works on HTTP
   • BPerform session fixation by setting the cookie via the XSS; the limitation is that the administrator may not use the fixed session
   • CInject a script that sends the document.cookie value to the tester's server; the limitation is that the cookie may be HttpOnly
   • DUse a network sniffer to capture the cookie; the limitation is that the traffic may be encrypted
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A web application developer is designing a session management system. The developer wants to ensure that session IDs are not predictable and are protected during transmission. Which combination of practices should the developer implement?

   • AUse a sequential counter and encode it in base64
   • BUse a short session ID and rotate it frequently
   • CStore the session ID in a URL parameter and use HTTP
   • DGenerate session IDs using a cryptographically secure random number generator and transmit them only over HTTPS
   Reveal Solution Discussion Select an answer first