CompTIA
ADR-001 · Question #72
Why is it necessary to pass session tokens over a secure, encrypted channel?
The correct answer is D. Session tokens can be presented to the application allowing an attacker to impersonate a valid. See the full explanation below for the reasoning.
Question
Why is it necessary to pass session tokens over a secure, encrypted channel?
Options
- ARevealing the session token over an unsecured channel would allow an attacker to determine the
- BSession tokens can be used to reveal the physical location of the Android device.
- CSession tokens contain the user password.
- DSession tokens can be presented to the application allowing an attacker to impersonate a valid
How the community answered
(25 responses)- A8% (2)
- B16% (4)
- C4% (1)
- D72% (18)
Community Discussion
No community discussion yet for this question.