QUESTION 26 Which of the following statement is true? the MAC address cannot be spoofed the IP address can be spoofed, so if you want to read response from the deceived party, you can use IP spoofing to hide yourself IP spoofing can be used for denial of service attack IP spoofing can be prevented or detected by switches QUESTION 27 Which of the following is NOT true about TCP session hijacking? it is a TCP layer threat it uses a TCP sequence prediction to guess the sequence number nowadays we use pseudorandom number generator, so it is impossible to guess the sequence number combining ARP spoofing and session hijacking, we can create a man-in-the-middle attack. QUESTION 28 Which of the following is NOT true about the smurf attack? smurf attack is a ping flood attack it exploits the broadcasting feature it works by setting destination address of the target machine and the source address as the broadcast address the victim machine can on a remote machine