Q33: KAS Prelims 2020 GS-II: Previous Year Question with Answer

Consider the following statements in the context of session hijacking. (i) It is compromising a user’s session to exploit their data and perform malicious activities or misusing their credentials. (ii) The most common method of session hijacking is IP spoofing where the attacker acts as one of the authenticated users. (iii) Session hijacking can be prevented by using packet sniffers and cross site scripting. (iv) To protect the network with session hijacking, the defender has to implement security measures at Application as well as Network level. Which of the statement(s) given above is/are correct ?