nerdexam
GAQM

CPEH-001 · Question #415

You are attempting to man-in-the-middle a session. Which protocol will allow you to guess a sequence number?

The correct answer is A. TCP. At the establishment of a TCP session the client starts by sending a SYN-packet (SYN=synchronize) with a sequence number. To hijack a session it is required to send a packet with a right seq-number, otherwise they are dropped.

Sniffing and Session Hijacking

Question

You are attempting to man-in-the-middle a session. Which protocol will allow you to guess a sequence number?

Options

  • ATCP
  • BUPD
  • CICMP
  • DUPX

How the community answered

(47 responses)
  • A
    81% (38)
  • B
    4% (2)
  • C
    4% (2)
  • D
    11% (5)

Explanation

At the establishment of a TCP session the client starts by sending a SYN-packet (SYN=synchronize) with a sequence number. To hijack a session it is required to send a packet with a right seq-number, otherwise they are dropped.

Topics

#TCP#session hijacking#sequence numbers#MITM

Community Discussion

No community discussion yet for this question.

Full CPEH-001 Practice