Q
Which of the following is a security best practice for session management?

Answer & Solution

Answer: Option A
Solution:
Using HTTPS to encrypt session data during transmission ensures that session data exchanged between the client and the server is encrypted, preventing eavesdropping and tampering.
Related Questions on Average

Which of the following PHP functions is used to destroy a session?

A). session_destroy()

B). destroy_session()

C). end_session()

D). remove_session()

How can you securely manage session data in PHP?

A). Store sensitive session data server-side

B). Store session data in plaintext on the client

C). Share session data in URL parameters

D). Store session data in unencrypted cookies

How can you destroy a session in PHP?

A). session_destroy()

B). destroy_session()

C). end_session()

D). remove_session()

How can you handle user authentication in PHP using a database?

A). Query the database to validate user credentials

B). Use session variables to track user sessions

C). Store passwords in plaintext

D). Validate user credentials in URL parameters

Which of the following is commonly used for user authentication in PHP?

A). Username and password

B). Session ID

C). IP address

D). URL parameters

How can you prevent session fixation attacks in PHP?

A). Regenerate session IDs after successful authentication

B). Use weak session IDs

C). Store session IDs in plaintext

D). Disable session management entirely

How can you implement remember me functionality in PHP?

A). By using persistent cookies with long expiration times

B). By storing passwords in plaintext

C). By disabling session management

D). By using URL parameters for authentication

What does the session_regenerate_id() function do in PHP?

A). Regenerates the session ID to prevent session fixation

B). Registers a new session ID with the server

C). Retrieves the session ID from the server

D). Ends the current session and deletes session data

Which PHP function is used to start a new session?

A). session_start()

B). start_session()

C). init_session()

D). new_session()

What is the primary benefit of salting passwords before hashing?

A). To prevent rainbow table attacks

B). To increase server performance

C). To encrypt session data

D). To generate random session IDs