GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

Chapter 12: Session Hijacking 1-10

Bryan Jensen 10 questions

Take the quiz

Questions in this quiz (10)

  1. 1Which statement defines session hijacking most accurately?
    1. ASession hijacking involves stealing a user's login information and using that information to pose as the user later.
    2. BSession hijacking involves assuming the role of a user through the compromise of physical tokens such as common access cards.
    3. CSession hijacking is an attack that aims at stealing a legitimate session and posing as that user while communicating with the web resource or host machine.
    4. DSession hijacking involves only web applications and is specific to stealing session IDs from compromised cookies.
  2. 2Jennifer has been working with sniffing tools on her company network. Since she wants to stay white hat-that is, ethical-she has gotten permission to undertake these activities. What would Jennifer's activities be categorized as?
    1. APassive
    2. BMonitoring
    3. CActive
    4. DSniffing
  3. 3Based on the diagram, what attack is occurring?
    C:\Windows\system32\cmd.exe - ping 192.168.1.4 -t
    Request timed out
    Request timed out
    Request timed out
    Request timed out
    Request timed out
    Reply from 192.168.1.4: bytes=32 time<1ms TTL=127
    Reply from 192.168.1.4: bytes=32 time<1ms TTL=127
    Reply from 192.168.1.4: bytes=32 time<1ms TTL=127
    Reply from 192.168.1.4: bytes=32 time<1ms TTL=127
    Reply from 192.168.1.4: bytes=32 time<1ms TTL=127
    1. ASession splicing
    2. BDenial-of-service
    3. CSource routing
    4. DMITM
  4. 4Jennifer is a junior system administrator for a small firm of 50 employees. For the last week a few users have been complaining of losing connectivity intermittently with no suspect behavior on their part such as large downloads or intensive processes. Jennifer runs Wireshark on Monday morning to investigate. She sees a large amount of ARP broadcasts being sent at a fairly constant rate. What is Jennifer most likely seeing?
    1. AARP poisoning
    2. BARP caching
    3. CARP spoofing
    4. DDNS spoofing
  5. 5Which of the following is not a source of session IDs?
    1. AURL
    2. BCookie
    3. CAnonymous login
    4. DHidden login
  6. 6Which kind of values is injected into a connection to the host machine in an effort to increment the sequence number in a predictable fashion?
    1. ACounted
    2. BBit
    3. CNull
    4. DIP
  7. 7An ethical hacker sends a packet with a deliberate and specific path to its destination. What technique is the hacker using?
    1. AIP spoofing
    2. BSource routing
    3. CARP poisoning
    4. DHost routing
  8. 8Network-level hijacking focuses on the mechanics of a connection such as the manipulation of packet sequencing. What is the main focus of web app session hijacking?
    1. ABreaking user logins
    2. BStealing session IDs
    3. CTraffic redirection
    4. DResource DoS
  9. 9A public use workstation contains the browsing history of multiple users who logged in during the last seven days. While digging through the history, a user runs across the following web address: www.snaz22enu.com/&w25/session=22525. What kind of embedding are you seeing?
    1. AURL embedding
    2. BSession embedding
    3. CHidden form embedding
    4. DTracking cookie
  10. 10Julie has sniffed an ample amount of traffic between the targeted victim and an authenticated resource. She has been able to correctly guess the packet sequence numbers and inject packets, but she is unable to receive any of the responses. What does this scenario define?
    1. ASwitched network
    2. BSSL encryption
    3. CTCP hijacking
    4. DBlind hijacking

Information

Description
CEH v9 Certified Ethical Hacker Version 9 Study Guide Quiz on Chapter 12: Session Hijacking 1-10, created by Bryan Jensen on 11/08/2018.
Language
English
Views
4
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?