Attacks are classified into which of the following? Each correct answer represents a complete
solution. Choose all that apply.

A.
Active attack

B.
Session hijacking

C.
Passive attack

D.
Replay attack

Explanation:

An attack is an action against an information system or network that attempts to violate the
system’s security policy. Attacks can be broadly classified as being either active or passive.
1.Active attacks modify the target system or message, i.e. they violate the integrity of the system
or message.
2.Passive attacks violate confidentiality without affecting the state of the system. An example of
such an attack is the electronic eavesdropping on network transmissions to release message
contents or to gather unprotected passwords.

Answer options B and D are incorrect. Session hijacking and replay attacks come under the
category of active attacks.