Virtual Labs

Tools

Aim

Theory

Pretest

Procedure

Simulation

Posttest

References

Feedback

Aim

Theory

Pretest

Procedure

Simulation

Posttest

References

Feedback

Broken Authentication Via Cookie Manipulation

Choose difficulty:

Beginner

Intermediate

Advanced

What is a session cookie used for?

a: To store user authentication information Explanation

Explanation

b: To track user visits to a website Explanation

Explanation

c: To store website content Explanation

Explanation

d: To encrypt data on the server Explanation

Explanation

What does 'base64 encoding' do to a cookie's data?

a: It makes the data readable but not secure Explanation

Explanation

b: It encrypts the data securely Explanation

Explanation

c: It compresses the data Explanation

Explanation

d: It makes the data unusable Explanation

Explanation

What should be done to prevent session cookie manipulation?

a: Use secure cookie attributes and server-side validation Explanation

Explanation

b: Allow cookies to be edited by users Explanation

Explanation

c: Use plain text for cookie storage Explanation

Explanation

d: Ignore session cookies Explanation

Explanation

Which attribute prevents JavaScript from accessing session cookies?

a: HttpOnly Explanation

Explanation

b: Secure Explanation

Explanation

c: SameSite Explanation

Explanation

d: Path Explanation

Explanation

How can an application prevent session fixation attacks?

a: Regenerate session IDs after login Explanation

Explanation

b: Use predictable session IDs Explanation

Explanation

c: Allow session IDs to be set manually Explanation

Explanation

d: Store session IDs in local storage Explanation

Explanation

Why should the Secure attribute be used with session cookies?

a: To ensure cookies are only sent over HTTPS Explanation

Explanation

b: To prevent JavaScript from accessing cookies Explanation

Explanation

c: To extend the cookie expiration time Explanation

Explanation

d: To allow cookies across multiple domains Explanation

Explanation

Community Links Sakshat Portal Outreach Portal FAQ: Virtual Labs

AGPL 3.0 & Creative Commons (CC BY-NC-SA 4.0)