Fundamentals of InfoSecintermediate
The Hypertext Transfer Protocol (HTTP) is stateless, so web applications often need a method such as cookies to associate requests with a user's session.
Answer
true
Explanation
### Why this is right
HTTP treats each request and response independently rather than maintaining a built-in session. Applications therefore need a mechanism such as cookies to associate multiple requests with the same user's session.
### The concept
Session management is important because a compromised session identifier can allow impersonation. The material also notes using Transport Layer Security (TLS) for the entire web session as part of secure session handling.
### The other options
- **False**: incorrect because HTTP itself does not provide a session concept in the material.
### Terms
- **Hypertext Transfer Protocol (HTTP)**: a protocol for web request and response exchanges.
- **Session**: a sequence of related interactions associated with a user.
- **Cookie**: a value stored by a browser and sent with later requests.
### Remember
HTTP requests are independent unless the application links them into a session.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free