Question $8(1$ point$)$

In this kind of attack, the attacker uses a "sniffer" program to capture a valid session token, and then uses that valid session token to gain unauthorized access to the web server.

a$)$ Session takeover

b$)$ XSS attack

c$)$ Session hijacking

d$)$ DNS Poisoning