CompTIA
ADR-001 · Question #40
Why should the Secure attribute be set on any session cookie sent to an Android application?
The correct answer is B. This attribute requests the client to only send the cookie over an HTTPS connection. See the full explanation below for the reasoning.
Question
Why should the Secure attribute be set on any session cookie sent to an Android application?
Options
- AThis attribute instructs the device to store the cookie in an encrypted region of the device storage.
- BThis attribute requests the client to only send the cookie over an HTTPS connection.
- CThis attribute encrypts the cookie so that if it is compromised, it cannot be used.
- DThis attribute ensures that session cookies are generated in a random fashion.
How the community answered
(28 responses)- A4% (1)
- B71% (20)
- C11% (3)
- D14% (4)
Community Discussion
No community discussion yet for this question.