SY0-301 · Question #374
SY0-301 Question #374: Real Exam Question with Answer & Explanation
The correct answer is D: Session hijacking. This is a textbook session hijacking attack. When Joe authenticates, the server issues a temporary session token (credential) to his browser. The attacker intercepts this token - likely via a packet sniffer on the open wireless network - and then replays it to the server, effecti
Question
Options
- AXML injection
- BDirectory traversal
- CHeader manipulation
- DSession hijacking
Explanation
This is a textbook session hijacking attack. When Joe authenticates, the server issues a temporary session token (credential) to his browser. The attacker intercepts this token - likely via a packet sniffer on the open wireless network - and then replays it to the server, effectively impersonating Joe without needing his actual password. XML injection and directory traversal are application-layer attacks targeting data or file systems. Header manipulation is a technique sometimes used within session hijacking but is not the name of the overall attack. Session hijacking specifically describes stealing and reusing a valid session token to impersonate a legitimate user.
Community Discussion
No community discussion yet for this question.