In the context of network security, what is session hijacking?

Question

Options

• AThe process of forcibly ending a user's session
• BIntercepting and exploiting valid session control mechanisms
• CHijacking the routing table of a router
• DRedirecting a user to a malicious site

• A
  6% (4)
• B
  88% (58)
• C
  3% (2)
• D
  3% (2)

Explanation

Option B is correct because session hijacking specifically involves an attacker taking over a legitimate, already-authenticated session - exploiting the session token or cookie to impersonate the victim without needing their credentials.

• A is wrong - forcibly ending a session describes a denial-of-service or session termination attack, not hijacking (which requires taking over, not stopping).
• C is wrong - manipulating routing tables describes route hijacking or BGP hijacking, a separate network-layer attack.
• D is wrong - redirecting users to malicious sites describes phishing or DNS spoofing, which may precede a hijack but are not the act itself.

Memory tip: Think of "hijacking" literally - a hijacker doesn't destroy the plane, they take control of it mid-flight. Session hijacking = stealing the wheel of an active, authenticated session, not crashing it or luring passengers onto a different plane.

No community discussion yet for this question.