010-160 Question #30: Real Exam Question with Answer & Explanation

Question

Options

• ACookies support identification and tracking of users.
• BCookies are always public and accessible to anyone on the internet.
• CCookies consume significant amounts of storage and can exhaust disk space.
• DCookies store critical data which is lost when a cookie is deleted.
• ECookies can contain and execute viruses and malware.

Explanation

Browser cookies are considered a privacy and security risk primarily because they enable persistent identification and behavioral tracking of users across sites and sessions.

Common mistakes.

• B. Cookies are scoped to their issuing domain via the Same-Origin Policy and are not accessible to arbitrary third parties on the internet.
• C. Cookies are capped at 4KB per cookie with per-domain browser limits, making disk space exhaustion technically impossible.
• D. Losing session data when a cookie is deleted is a usability inconvenience, not a security danger.
• E. Cookies are plain-text data structures and contain no executable code; they cannot harbor or execute viruses or malware.

Concept tested. Privacy and tracking risks of HTTP cookies

Reference. https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Cookies

No community discussion yet for this question.