Which of the following statements are correct about spoofing and session hijacking? Each correct answer represents a complete solution. (Choose all that apply.)