What is a common mitigation technique to limit the impact of a session hijacking attack?

Using the same session ID for all users to simplify management

Setting short session timeouts to reduce the window of opportunity

Allowing multiple simultaneous sessions for the same user

Storing session data in client-side cookies to reduce server load

A network administrator notices unusual TCP traffic from an internal host that is sending packets with sequence numbers that do not match the expected window. The administrator suspects an active session hijacking attempt. Which technique is the attacker most likely using, and what immediate step should the administrator take to confirm?

TCP SYN flood; look for a high volume of SYN packets

Session sidejacking; inspect the HTTP cookies in the captured traffic

TCP sequence prediction; compare the sequence numbers with a packet capture from the victim's connection

ARP spoofing; check the ARP cache on the victim's machine

A security team is implementing detection for session hijacking. They want to minimize false positives while detecting anomalies. Which approach is the most effective?

Monitoring for changes in user behavior, such as IP address, user-agent, and geolocation

Blocking all requests that do not include a valid session cookie

Requiring re-authentication for every request

A web developer is hardening a session management system. The application currently uses a session cookie that is accessible to JavaScript and is transmitted over HTTP. Which two changes should the developer make to reduce the risk of session hijacking?

Use a shorter session ID and store it in a URL parameter

Set the SameSite attribute to Lax and increase the session timeout

Set the HttpOnly and Secure flags on the session cookie

Enable HTTP compression and use a custom header for the session ID

What is a recommended practice for session management to prevent session hijacking?

Keeping the same session ID for the entire lifetime of the user account

Storing session IDs in client-side JavaScript variables

Using the user's IP address as the session ID

Regenerating the session ID after user authentication

EC-CouncilCertified Ethical Hacker

Domain 4Objective 4

Session Hijacking CEH Practice Questions (Page 8)

Part of the Network and Perimeter Hacking domain, which makes up ~9% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~9–14 in this domain), expect 2–3 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

8concepts

Questions 36–40

36foundation · easy
What is a common mitigation technique to limit the impact of a session hijacking attack?
Select an answer first
37application · medium
A network administrator notices unusual TCP traffic from an internal host that is sending packets with sequence numbers that do not match the expected window. The administrator suspects an active session hijacking attempt. Which technique is the attacker most likely using, and what immediate step should the administrator take to confirm?
Select an answer first
38expert · hard
A security team is implementing detection for session hijacking. They want to minimize false positives while detecting anomalies. Which approach is the most effective?
Select an answer first
39application · medium
A web developer is hardening a session management system. The application currently uses a session cookie that is accessible to JavaScript and is transmitted over HTTP. Which two changes should the developer make to reduce the risk of session hijacking?
Select an answer first
40foundation · easy
What is a recommended practice for session management to prevent session hijacking?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.