What is IP spoofing in the context of TCP session hijacking?

Assigning a fake MAC address to the network interface

Using a proxy server to hide the attacker's real IP address

Encrypting the IP header to hide the source address

Changing the source IP address of packets to impersonate a trusted host

Which of the following is a common method used to steal a session ID?

Sending a crafted ICMP packet to the client

Exploiting a buffer overflow in the web server

Performing a port scan on the server

Intercepting network traffic with a packet sniffer

A web application has a stored cross-site scripting (XSS) vulnerability. An attacker exploits it to steal session cookies. Which defense would have prevented the attacker from using the stolen cookie?

Setting the HttpOnly flag on the session cookie

A security architect is designing a defense-in-depth strategy against session hijacking. The organization has a legacy application that cannot be modified to use secure cookies. Which additional control is the most effective in mitigating session hijacking?

Requiring multi-factor authentication (MFA) for every request

Implementing network segmentation

Deploying a web application firewall (WAF) with rules to detect and block session hijacking attempts

EC-CouncilCertified Ethical Hacker

Domain 4Objective 4

Session Hijacking CEH Practice Questions (Page 4)

Part of the Network and Perimeter Hacking domain, which makes up ~9% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~9–14 in this domain), expect 2–3 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 16–20

16application · medium
A penetration tester is performing a session hijacking test on a web application. The tester has access to the same network as the victim and wants to capture the victim's session cookie. Which tool is the most appropriate for this task?
Select an answer first
17foundation · easy
What is IP spoofing in the context of TCP session hijacking?
Select an answer first
18foundation · easy
Which of the following is a common method used to steal a session ID?
Select an answer first
19application · medium
A web application has a stored cross-site scripting (XSS) vulnerability. An attacker exploits it to steal session cookies. Which defense would have prevented the attacker from using the stolen cookie?
Select an answer first
20expert · hard
A security architect is designing a defense-in-depth strategy against session hijacking. The organization has a legacy application that cannot be modified to use secure cookies. Which additional control is the most effective in mitigating session hijacking?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.