Question

Which of the following is not session layer vulnerability?

(a) Mishandling of undefined, poorly defined

(b) Spoofing and hijacking of data based on failed authentication attempts

(c) Passing of session-credentials allowing intercept and unauthorized use

(d) Weak or non-existent authentication mechanisms

I have been asked this question in a national level competition.

My question comes from Network Models in portion Understanding Network Models for Security of Cyber Security

Answer 1

Right answer is (a) Mishandling of undefined, poorly defined

Explanation: Vulnerabilities of session layer of the OSI model are spoofing and hijacking of data based on failed authentication attempts, weak or non-existent authentication mechanisms, and the passing of session-credentials allowing intercept and unauthorized use.