Which of the following takes control of a session between a server and a client using TELNET, FTP, or any other non-encrypted TCP/IP utility?

A dictionary attack systematically tries words from a predefined wordlist to crack passwords offline or online and does not involve taking over an already-authenticated network session.

Session hijacking exploits active TCP sessions by intercepting or predicting session tokens or TCP sequence numbers, allowing the attacker to impersonate the legitimate client mid-session; unencrypted protocols like Telnet and FTP are particularly vulnerable because credentials and session data travel in cleartext and can be captured and replayed.

A Trojan horse is malware that disguises itself as legitimate software to gain unauthorized access to a system and is unrelated to intercepting or hijacking live TCP/IP sessions.

Social engineering psychologically manipulates individuals into divulging sensitive information or performing actions and involves no technical interception of active network sessions.