A network analyst received a number of reports that impersonation was taking place on the network. Session tokens were deployed to mitigate this issue and defend against which of the following…

A replay attack occurs when an attacker intercepts a valid authentication token or credential and resubmits it to impersonate a legitimate user. Session tokens that are time-limited, one-time-use, or cryptographically bound to the session prevent reuse of captured tokens, directly neutralizing replay attacks.

A DDoS attack floods a target with traffic to exhaust resources; session tokens do not mitigate volumetric attacks.

A Smurf attack is an ICMP amplification attack targeting network infrastructure, not session-based impersonation.

A Ping of Death exploits oversized ICMP packets to crash systems and is unrelated to session token impersonation.