Certified Ethical Hacker (CEH v13) — Question 118

Jake, a network security specialist, is trying to prevent network-level session hijacking attacks in his company. While studying different types of such attacks, he learns about a technique where an attacker inserts their machine into the communication between a client and a server, making it seem like the packets are flowing through the original path. This technique is primarily used to reroute the packets. Which of the following types of network-level session hijacking attacks is Jake studying?

Answer options

• A. TCP/IP Hijacking
• B. RST Hijacking
• C. UDP Hijacking
• D. Man-in-the-middle Attack Using Forged ICMP and ARP Spoofing

Correct answer: D

Explanation

The correct answer is D, as a Man-in-the-middle Attack Using Forged ICMP and ARP Spoofing effectively allows an attacker to intercept and redirect communication between the client and server. Options A, B, and C refer to different types of hijacking that do not specifically involve the insertion of an attacker into the communication path in the same manner as option D.