Which of the following statements are correct about spoofing and session hijacking?

Spoofing is an attack in which an attacker can spoof the IP address or other identity of the target and the valid user cannot be active.

Spoofing is an attack in which an attacker can spoof the IP address or other identity of the target but the valid user can be active.

Session hijacking is an attack in which an attacker takes over the session, and the valid user's session is disconnected.

Session hijacking is an attack in which an attacker takes over the session, and the valid user's session is not disconnected.