Session Fixation WAHS Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which application behavior is a vulnerability that enables session fixation?

   • AThe application uses HTTPS to encrypt all traffic.
   • BThe application sets the HttpOnly flag on session cookies.
   • CThe application regenerates the session ID after login.
   • DThe application accepts session IDs from URL query strings.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An attacker wants to perform a session fixation attack against a web application. The application accepts session IDs from URL query parameters. Which delivery method would allow the attacker to set the victim's session ID to a known value?

   • ASending the victim a link that includes a session ID in the query string
   • BUsing a brute-force tool to guess the victim's session ID
   • CInjecting a script that steals the victim's session cookie after login
   • DIntercepting the victim's network traffic and reading the session cookie
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A penetration tester is assessing a web application that uses a session ID in the URL query string. The tester sends a crafted link to a victim, who clicks it and then logs in. The tester then uses the same session ID from the URL and successfully accesses the victim's account. Which mitigation would MOST directly prevent this attack?

   • ARegenerate the session ID immediately after successful authentication
   • BSet the session cookie's Secure flag
   • CUse HttpOnly cookies for session management
   • DBind the session to the user's IP address
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Why does failing to regenerate the session ID after login make an application vulnerable to session fixation?

   • AIt causes the session cookie to be sent over HTTP.
   • BIt makes the session ID easier to guess.
   • CIt prevents the server from tracking the user's activity.
   • DIt allows the attacker to keep using the same session ID after the victim authenticates.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An attacker crafts a URL like https://example.com/login?sessionid=ATTACKER123 and sends it to a victim. The victim clicks the link, logs in, and the attacker then visits https://example.com/profile?sessionid=ATTACKER123 and sees the victim's data. Which step in the attack flow was essential for the attacker's success?

   • AThe victim used a weak password that the attacker guessed.
   • BThe application used HTTPS to protect the login request.
   • CThe application did not regenerate the session ID after the victim authenticated.
   • DThe victim's browser stored the session ID in a persistent cookie.
   Reveal Solution Discussion Select an answer first