Network Cookie Review - IGCSE478

​Assessment review

By Craig GRIEBENOW

Drag and Drop

User types google.com into browser

Placeholder

sends a DNS query

DNS server responds with ​

Placeholder

Browser sends​

Placeholder

request to the IP address

Google server receives the request and sends back​

Placeholder

Browser receives the ​

Placeholder

and renders it

Drag these tiles and drop them in the correct blank above

browser

IP address

HTTP/HTTPS

HTML code

HTML

Open Ended

What would happen if we skipped step 3 (DNS)?

Open Ended

Why does the browser need to render HTML?

Key Takeaway

Full process =

DNS query

→ IP response

→ HTTP request

→ HTML response

→ browser rendering

Open Ended

SCENARIO: It's lunchtime at school. Student A logs into the school learning platform using a persistent cookie (so they stay logged in). They check their grades, then leave to get lunch. They forget to log out.

5 minutes later, Student B sits down at the same computer and opens the browser.

1. Is Student A still logged in? Why or why not?

Open Ended

SCENARIO: It's lunchtime at school. Student A logs into the school learning platform using a persistent cookie (so they stay logged in). They check their grades, then leave to get lunch. They forget to log out.

5 minutes later, Student B sits down at the same computer and opens the browser.

1. What could Student B do?

Open Ended

SCENARIO: It's lunchtime at school. Student A logs into the school learning platform using a persistent cookie (so they stay logged in). They check their grades, then leave to get lunch. They forget to log out.

5 minutes later, Student B sits down at the same computer and opens the browser.

1. Why is this a security problem?

Open Ended

How would session cookies prevent this?

Open Ended

Why is this important for shared school computers?

Key Takeaway

Session cookies
= auto-logout
= security on shared computers.

Persistent cookies
= security risk on shared devices.

Minimal — no long-term tracking; auto-logout

Higher — enables long-term tracking of shopping habits; could be sold to advertisers

Privacy Impact

Session: Keeps items in cart while you shop; deleted when you close browser

Persistant: Faster checkout on future visits; convenient for returning customers

Why Its Useful

Why E-Commerce Uses BOTH Cookie Types

Open Ended

Why does Amazon use session cookies for your shopping cart?

Open Ended

Why does Amazon use persistent cookies for your saved address?

Open Ended

Which cookie type is better for privacy?

Key Takeaway:

E-commerce uses both because session
= immediate functionality

persistent
= convenience.

But persistent raises privacy concerns.

Patterns for full marks:

Full step-by-step sequence (not just "DNS converts domain to IP")

Explain what goes wrong and why it's a security/privacy problem

Show how each is used, why both are needed, and the implications

What to include:

Process

Scenaro

Comparison

Question Type: