nerdexam
EC-Council

ECSS · Question #170

ECSS Question #170: Real Exam Question with Answer & Explanation

Sign in or unlock ECSS to reveal the answer and full explanation for question #170. The question stem and answer options stay visible for context.

Question

Alice wants to prove her identity to Bob. Bob requests her password as proof of identity, which Alice dutifully provides (possibly after some transformation like a hash function); meanwhile, Eve is eavesdropping the conversation and keeps the password. After the interchange is over, Eve connects to Bob posing as Alice; when asked for a proof of identity, Eve sends Alice's password read from the last session, which Bob accepts. Which of the following attacks is being used by Eve?

Options

  • AFirewalking
  • BReplay
  • CSession fixation
  • DCross site scripting

Unlock ECSS to see the answer

You've previewed enough free ECSS questions. Unlock ECSS for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full ECSS Practice