nerdexam
GIAC

GSNA · Question #18

Which of the following statements about session tracking is true?

The correct answer is B. When using cookies for session tracking, the name of the session tracking cookie must be. If you are using cookies for session tracking, the name of the session tracking cookie must be jsessionid. A jsessionid can be placed only inside a cookie header. You can use HTTP cookies to store information about a session. The servlet container takes responsibility of…

Database & Application Auditing

Question

Which of the following statements about session tracking is true?

Options

  • AWhen using cookies for session tracking, there is no restriction on the name of the session
  • BWhen using cookies for session tracking, the name of the session tracking cookie must be
  • CA server cannot use cookie as the basis for session tracking.
  • DA server cannot use URL rewriting as the basis for session tracking.

How the community answered

(22 responses)
  • A
    5% (1)
  • B
    73% (16)
  • C
    18% (4)
  • D
    5% (1)

Explanation

If you are using cookies for session tracking, the name of the session tracking cookie must be jsessionid. A jsessionid can be placed only inside a cookie header. You can use HTTP cookies to store information about a session. The servlet container takes responsibility of generating the session ID, making a new cookie object, associating the session ID into the cookie, and setting the cookie as part of response.

Topics

#session tracking#cookies#URL rewriting#web application security

Community Discussion

No community discussion yet for this question.

Full GSNA Practice