​EXAM-STYLE QUESTIONS: WEB BROWSERS & COOKIES

​EXAM-STYLE QUESTIONS: WEB BROWSERS & COOKIES

By Craig GRIEBENOW

Open Ended

Question 1: Session Cookies (4 marks)

Scenario: A student logs into their school email account on a shared computer in the library. The website creates a session cookie on the device.

Question: Explain why a school might use a session cookie instead of a persistent cookie for login security. (4 marks)

Model Answer:

• Session cookies are temporary and deleted when the browser closes (1 mark)

• This means if a student forgets to log out, the next person who uses the computer won't automatically be logged in (1 mark)

• Persistent cookies would remain on the device, allowing unauthorized access if someone else uses the computer (1 mark)

• Session cookies therefore provide better security for sensitive accounts like school email (1 mark)

Open Ended

Question 2: Persistent Cookies (4 marks)

Scenario: A student visits Taobao and the website stores a persistent cookie on their device.

Question: Describe what information a persistent cookie might contain and explain why Taobao would want to store this information. (4 marks)

Model Answer:

• The cookie might contain the student's username, language preference, items viewed, or shopping cart contents (1 mark)

• Taobao stores this information to remember the student's preferences when they return (1 mark)

• This provides a personalized experience—the student doesn't have to log in again or reset their language preference (1 mark)

• It also allows Taobao to recommend products based on the student's browsing history (1 mark)

Open Ended

Question 3: Third-Party Cookies & Tracking (5 marks)

Scenario: A student browses shoes on Taobao, then sees ads for the same shoes on Instagram the next day.

Question: Explain how third-party cookies enable this cross-website tracking. (5 marks)

Model Answer:

• When the student visits Taobao, an ad network (e.g., Google Ads) that is embedded in the website creates a third-party cookie on the student's device (1 mark)

• This cookie contains information about the shoes the student viewed (1 mark)

• When the student visits Instagram, which also uses the same ad network, the ad network recognizes the cookie (1 mark)

• The ad network uses this information to show the student targeted ads for the shoes they viewed on Taobao (1 mark)

• This demonstrates how third-party cookies enable tracking across multiple websites without the student's direct knowledge (1 mark)

Open Ended

Question 4: Cookie Management & Privacy (4 marks)

Scenario: A student is concerned about privacy and decides to clear all cookies from their browser.

Question: Explain whether clearing cookies will protect the student from future tracking. Justify your answer. (4 marks)

Model Answer:

• Clearing cookies removes existing cookies from the device (1 mark)

• However, clearing cookies will NOT protect the student from future tracking (1 mark)

• When the student visits websites again, those websites can create new cookies on the device (1 mark)

• To prevent tracking, the student would need to disable cookies or block third-party cookies in their browser settings, not just clear them (1 mark)

Open Ended

Question 5: Application Question - Privacy Concerns (5 marks)

Scenario: A privacy advocate argues that third-party cookies are a serious privacy concern and should be banned.

Question: Describe two privacy concerns related to third-party cookies and explain why they matter. (5 marks)

Model Answers:

• Concern 1 - Tracking without consent: Third-party cookies track a user's activity across multiple websites without their direct knowledge or permission. This violates privacy because users don't realize they're being tracked (2 marks)

• Concern 2 - Behavioral profiling: Ad networks use third-party cookies to build detailed profiles of users' interests, preferences, and behaviors. This information can be sold to other companies or used for targeted manipulation (2 marks)

• These concerns matter because users lose control over their personal data and how it's used (1 mark)