nerdexam
GIAC

GPEN · Question #358

Which of the following tools will you use to prevent from session hijacking? Each correct answer represents a complete solution. Choose all that apply.

The correct answer is B. OpenSSH C. SSL. OpenSSH and SSL prevent session hijacking by encrypting network communications end-to-end, making it infeasible for an attacker to intercept and take over a session.

Exploitation & Post-Exploitation Techniques

Question

Which of the following tools will you use to prevent from session hijacking? Each correct answer represents a complete solution. Choose all that apply.

Options

  • ATelnet
  • BOpenSSH
  • CSSL
  • DRlogin

How the community answered

(52 responses)
  • A
    10% (5)
  • B
    73% (38)
  • D
    17% (9)

Why each option

OpenSSH and SSL prevent session hijacking by encrypting network communications end-to-end, making it infeasible for an attacker to intercept and take over a session.

ATelnet

Telnet transmits all data including credentials and session tokens in plaintext, making it highly vulnerable to session hijacking via packet sniffing.

BOpenSSHCorrect

OpenSSH replaces plaintext remote access protocols by establishing an encrypted, authenticated channel using public-key cryptography, ensuring that an attacker cannot read or inject data into the session even if packets are captured.

CSSLCorrect

SSL (Secure Sockets Layer) wraps application-layer traffic in an encrypted tunnel with server and optionally client authentication, preventing an attacker from performing a man-in-the-middle attack that would enable session hijacking.

DRlogin

Rlogin sends authentication and session data in plaintext over the network, providing no encryption and therefore no protection against session hijacking.

Concept tested: Encrypted protocols that prevent session hijacking

Source: https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh-overview

Topics

#session hijacking#OpenSSH#SSL/TLS#encrypted communications

Community Discussion

No community discussion yet for this question.

Full GPEN Practice