312-96: Certified Application Security Engineer (Java)

By ECCouncil · Question Mode

QuestionQ19

VerifiedSecure Coding Practices for Session Management

Which line in the following Java code example could make the application susceptible to a session attack?

Question Image

Explanation

Setting a session cookie’s maximum age to 3,600 seconds makes the cookie persistent rather than limited to the browser session. A persistent authentication cookie can remain available for reuse if it is stolen, increasing exposure to session hijacking.

Community Discussion

No comments yet. Be the first to start the discussion!