What is the purpose of a session cookie in web applications?
- A.To permanently store user passwords
- B.To block malicious scripts from running
- C.To encrypt all data on the website
- D.To identify and track a user's session after they log in
Why D is correct
Session cookies contain a unique identifier (session ID) that links a user's browser to their server-side session data. After login, the session cookie is sent with every request so the server knows which user is making the request without requiring re-authentication for each page.
Know someone studying for Security Fundamentals? Send them this one.