Session Hijacking Techniques EHE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A security analyst notices that a public Wi-Fi network in a coffee shop is capturing traffic. A user logs into a web application that uses only HTTP for the session cookie, and the analyst later sees the cookie value in the captured traffic. Which combination of controls would best prevent this type of session theft?

   • AUse a longer random session ID
   • BEnforce HTTPS with the Secure flag on the session cookie
   • CSet a short session timeout and use IP binding
   • DUse a VPN on the client and disable JavaScript
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   After an attacker has obtained a valid session ID, what is the next step in a session hijacking attack?

   • AThe attacker sends the session ID to the server to impersonate the victim
   • BThe attacker changes the victim's password
   • CThe attacker sends a crafted link to the victim
   • DThe attacker waits for the session to expire
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A developer at a small e-commerce company discovers that the web application reflects user input in error messages without proper sanitization. An attacker exploits this to inject a script that sends the current session cookie to an external server. Which countermeasure would most directly prevent this specific attack from succeeding?

   • AImplement IP-based session binding
   • BSet the Secure flag on the session cookie
   • CEncode all user-supplied data before rendering it in HTTP responses
   • DUse a longer random session ID
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company's web application is accessed over a corporate network. The security team wants to prevent session side-jacking. Which configuration change would be most effective?

   • AUse a longer session ID with more entropy.
   • BRegenerate the session ID after login.
   • CEnforce HTTPS for all pages and mark the session cookie as Secure.
   • DSet the HttpOnly attribute on the session cookie.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How can cross-site scripting (XSS) be used to steal session cookies?

   • ABy guessing the session ID through brute force
   • BBy sniffing network traffic to capture the cookie as it is transmitted
   • CBy injecting malicious JavaScript that reads the document.cookie property and sends it to the attacker
   • DBy sending a crafted link to the victim to set a known session ID
   Reveal Solution Discussion Select an answer first