Question

Which of the following is an example of session layer vulnerability? (a) weak or non-existent mechanisms for authentication (b) overloading of transport-layer mechanisms (c) poor handling of unexpected input (d) highly complex application security controls The question was posed to me in a job interview. This intriguing question comes from Network Models topic in division Understanding Network Models for Security of Cyber Security Select the correct answer from above options Cyber Security questions and answers, Cyber Security questions pdf, Cyber Security question bank, Cyber Security questions and answers pdf, mcq on Cyber Security pdf,

Answer 1

Right choice is (a) weak or non-existent mechanisms for authentication For explanation: Weak or non-existent mechanisms for authentication is an example of session layer vulnerability. Other examples are spoofing and the hijacking of data based on failed-authentication attempts & passing of session-credentials allowing intercept and unauthorized use.