GIAC

GWAPT · Question #45

A web application does not log users out after a period of inactivity. What is the best way to address this issue?

The correct answer is A. Implement automatic session timeout policies. See the full explanation below for the reasoning.

Question

A web application does not log users out after a period of inactivity. What is the best way to address this issue?

Options

AImplement automatic session timeout policies
BRequire re-authentication every minute
CDisable user sessions altogether
DAllow unlimited session durations for trusted users

How the community answered

(32 responses)

A
84% (27)
B
3% (1)
C
3% (1)
D
9% (3)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full GWAPT Practice