ITPEC IP October 2018 Question 33
ITPEC IP October 2018 — Question 33 of 100
A stolen authentication cookie can allow a web service account to be hijacked. If the cookie contains a valid session identifier, an attacker may present it to the service and impersonate the logged-in user without knowing the password until the session is invalidated or expires.
Answer (c)
Why not others:
- cookie theft does not itself install a computer virus
- it does not directly copy arbitrary PC files to an external destination
- wireless LAN intrusion is a separate network-access threat
Key rule: Protect session cookies with HTTPS, appropriate cookie attributes, short lifetimes, and server-side invalidation to reduce session hijacking risk.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official IP past-paper collection or Report an issue.