Session Hijacking CEH Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is a common method for transmitting a session ID from the server to the client?

   • AIn the DNS response for the domain name
   • BIn an HTTP response header such as Set-Cookie
   • CIn the TCP sequence number of the response packet
   • DIn the HTTP response body as a hidden form field
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In TCP/IP session hijacking, what is the attacker's primary goal?

   • ATo predict the next sequence number and inject packets into an established TCP connection
   • BTo resolve the target's IP address to a different MAC address
   • CTo flood the target with SYN packets to exhaust its resources
   • DTo encrypt the session traffic to prevent the server from reading it
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A security analyst is using a tool to perform session sidejacking on a test network. The analyst has already captured network traffic and extracted session cookies. Which tool is specifically designed to replay these cookies to hijack a session?

   • ABurp Suite
   • BNmap
   • CHamster
   • DWireshark
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security engineer is investigating a suspected TCP session hijack on a server. The engineer has captured packets and noticed that the server received a TCP segment with an unexpected sequence number, causing the connection to reset. The engineer suspects an off-path attacker is attempting to inject data. Which condition is the most critical for the attacker to successfully hijack the TCP session?

   • AHaving physical access to the network segment
   • BKnowing the current sequence number and the next expected acknowledgment
   • CUsing a tool like Wireshark to capture traffic
   • DKnowing the destination port of the session
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A developer is designing a session management system and wants to prevent an attacker from predicting a valid session ID. Which session ID generation approach is most secure?

   • AUse a cryptographically secure random number generator with at least 128 bits of entropy
   • BUse a sequential number based on the user's ID
   • CUse a random number generated by the client's browser
   • DUse a timestamp and a hash of the user's IP address
   Reveal Solution Discussion Select an answer first