SSCP · Question #828
Which of the following can prevent hijacking of a web session?
The correct answer is C. SSL. SSL (Secure Sockets Layer) - and its successor TLS - encrypts the entire communication channel between client and server, including session tokens and cookies. Session hijacking typically works by stealing or forging the session token; SSL/TLS prevents this by making traffic…
Question
Options
- ARSA
- BSET
- CSSL
- DPPP
How the community answered
(27 responses)- A4% (1)
- C93% (25)
- D4% (1)
Explanation
SSL (Secure Sockets Layer) - and its successor TLS - encrypts the entire communication channel between client and server, including session tokens and cookies. Session hijacking typically works by stealing or forging the session token; SSL/TLS prevents this by making traffic unreadable to eavesdroppers and by authenticating the server (and optionally the client) via certificates. RSA is an asymmetric encryption algorithm (a component used within SSL, not a standalone session-protection mechanism). SET (Secure Electronic Transaction) is specific to credit card transactions. PPP (Point-to-Point Protocol) is a data link layer encapsulation protocol unrelated to web session security.
Topics
Community Discussion
No community discussion yet for this question.