GPEN · Question #358
Which of the following tools will you use to prevent from session hijacking? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is B. OpenSSH C. SSL. OpenSSH and SSL prevent session hijacking by encrypting network communications end-to-end, making it infeasible for an attacker to intercept and take over a session.
Question
Which of the following tools will you use to prevent from session hijacking? Each correct answer represents a complete solution. Choose all that apply.
Options
- ATelnet
- BOpenSSH
- CSSL
- DRlogin
How the community answered
(52 responses)- A10% (5)
- B73% (38)
- D17% (9)
Why each option
OpenSSH and SSL prevent session hijacking by encrypting network communications end-to-end, making it infeasible for an attacker to intercept and take over a session.
Telnet transmits all data including credentials and session tokens in plaintext, making it highly vulnerable to session hijacking via packet sniffing.
OpenSSH replaces plaintext remote access protocols by establishing an encrypted, authenticated channel using public-key cryptography, ensuring that an attacker cannot read or inject data into the session even if packets are captured.
SSL (Secure Sockets Layer) wraps application-layer traffic in an encrypted tunnel with server and optionally client authentication, preventing an attacker from performing a man-in-the-middle attack that would enable session hijacking.
Rlogin sends authentication and session data in plaintext over the network, providing no encryption and therefore no protection against session hijacking.
Concept tested: Encrypted protocols that prevent session hijacking
Source: https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh-overview
Topics
Community Discussion
No community discussion yet for this question.