Exam 350-901 topic 1 question 377 discussion

Actual exam question from Cisco's 350-901

Question #: 377
Topic #: 1

An engineer is developing an application to use across organizations. The application will process sensitive data and access will be allowed from the internet. The application will need to store the session ID of the users. This must be implemented using a secure management mechanism. Which secret storage approach must the engineer take to meet these requirements?

A. browser cache
B. JavaScript variable
C. persistent cookie
D. non-persistent cookie

Show Suggested Answer

Suggested Answer: D 🗳️

by 1a63556 at Dec. 26, 2023, 5:06 p.m.

Comments

Submit Cancel

1a63556

Highly Voted 11 months ago

Selected Answer: D

D. Non-persistent cookie A non-persistent cookie is a more secure method for storing session IDs because these cookies are stored only in temporary memory, and they are deleted when the user closes the browser. They do not record any information on the user's hard drive and therefore cannot be used to gather data about the user or to deliver viruses or other harmful payloads. In addition, they are more resilient to cross-site scripting (XSS) attacks because they do not persist across sessions. This makes them a suitable choice for storing sensitive data such as session IDs in a secure manner.

upvoted 5 times

...