Question

Failed sessions allow brute-force attacks on access credentials. This type of attacks are done in which layer of the OSI model?

(a) Physical layer

(b) Data-link Layer

(c) Session layer

(d) Presentation layer

I got this question in an interview for job.

The question is from Network Models in section Understanding Network Models for Security of Cyber Security

Answer 1

The correct option is (c) Session layer

For explanation: Session identification may be subject to spoofing may lead to data leakage which depends on failed authentication attempts and allow hackers to allow brute-force attacks on access credentials.