What is a Session ID?

A unique code assigned to the user's connection for a period of time.

What is session hijacking?

When a malicious actor gets possession of a user's active Session ID and impersonates the user in a connection to the website.

When a user logs into a session without proper credentials.

When a user forgets to log out of a session.

When a website automatically logs out a user after a period of inactivity.

Which of the following is NOT a method of session hijacking?

Encrypting the Session ID with a secure algorithm.

Predicting the Session ID based on info about what ID format is used on that website.

Forcing the Session ID using a phishing attack or exploit.

Capturing the Session ID through sniffing or AiTM attacks.

What is one way to manipulate session IDs?

By manipulating Session IDs contained in the URL

What is a cookie in the context of web browsing?

A small packet of data created by the web server and stored on the user’s computer.

A type of malware that infects the user's computer.

A software application used to browse the internet.

A hardware component of a computer.

What is the main difference between persistent and non-persistent cookies?

Persistent cookies have an expiration date set by the website, while non-persistent cookies do not.

Persistent cookies are created by the user, while non-persistent cookies are created by the web server.

Persistent cookies are used for security purposes, while non-persistent cookies are used for tracking.

Persistent cookies are stored on the server, while non-persistent cookies are stored on the user's computer.

Why do websites show cookie popups?

To inform users about tracking and get consent to install cookies.

To advertise new products and services.

To provide users with technical support.

To offer discounts and promotions.

What happens to non-persistent cookies when the browser is closed?

They are saved permanently on the user's computer.

They are transferred to the web server.

They are converted into persistent cookies.

What happens after a user authenticates themselves on a website using cookies?

The browser uses the cookie as a token to track activity through pages of the website

The user is logged out immediately

The user's IP address is changed

The user's password is stored in the browser

Which of the following is NOT a problem associated with cookie theft?

The original authentication transaction is encrypted

The exchange of the cookie is typically not encrypted

The cookie can be easily intercepted and stolen

A stolen authentication cookie can be used to access the user’s personal pages on websites

What is an Intercepting Proxy?

An app that sits between the client browser and a web server to intercept and modify traffic.

A tool used to encrypt data between a client and a server.

A software used to create web applications.

A type of firewall used to block unauthorized access.

What can Intercepting Proxies be used for?

Capturing cookies or session IDs to reuse later

What is one of the recommended practices for securing your browser?

Use the most updated version of your browser.

Use an outdated version of your browser.

Add as many extensions as possible.

Why should you avoid using the browser while logged on locally with an admin level account?

It can impact the performance of the browser.

It makes the browser crash frequently.

What is the purpose of turning on the pop-up blocker?

To prevent unwanted pop-ups that could be malicious.

To increase the speed of the browser.

To improve the browser's appearance.

What is a potential risk of adding too many browser extensions?

They can impact security since they are third-party add-ons.

They can make the browser look cluttered.

They can slow down the browser.

They can increase the number of pop-ups.

9.2.1 Web Vulerabilities

Authored by Christine Rehwinkel

Computers

12th Grade

Used 3+ times

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

28 questions

Show all answers

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What does OWASP stand for?

Open Web Application Security Project

Online Web Application Security Program

Open Web Application Safety Project

Online Web Application Safety Program

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What is the primary goal of OWASP?

To create web applications

To help web developers improve security of their code

To design web application interfaces

To develop new programming languages

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

Why do websites want to give users interactive content?

To increase server load

To keep track of user preferences or shopping carts

To reduce website traffic

To make websites less secure

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What is the nature of the HTTP protocol in terms of retaining information?

Stateful

Secure

Stateless

Interactive

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What is a key ingredient to interactive browsing?

A browser remembers you while you move from page to page on the website.

A browser forgets your session after each page.

A browser requires you to log in on every page.

A browser does not store any information.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What is a session in the context of web browsing?

A user's visit to a website during a specific time frame.

A user's login credentials.

A user's browsing history.

A user's IP address.

MULTIPLE CHOICE QUESTION

30 sec • 1 pt

What must a website recognize to give continuity during a user's visit?

The browser on the user's IP address and username if logged in.

The user's browsing history.

The user's email address.

The user's password.

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

25 questions

InDesign q1

Quiz

•

9th - 12th Grade

25 questions

Lesson 4_Advanced Motion Tweening

Quiz

•

9th - 12th Grade

25 questions

MEDIA LITERACY

Quiz

•

12th Grade

24 questions

minecraft

Quiz

•

KG - Professional Dev...

26 questions

AP CSP Cybersecurity and Global Impacts

Quiz

•

9th - 12th Grade

25 questions

Operating Systems

Quiz

•

9th - 12th Grade

25 questions

Electronic Components

Quiz

•

9th - 12th Grade

25 questions

2.6 The Internet Address (IPv4 & IPv6)

Quiz

•

11th - 12th Grade

Popular Resources on Wayground

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

$fractions$

22 questions

fractions

Quiz

•

3rd Grade

20 questions

Main Idea and Details

Quiz

•

5th Grade

20 questions

Context Clues

Quiz

•

6th Grade

15 questions

Equivalent Fractions

Quiz

•

4th Grade

20 questions

Figurative Language Review

Quiz

•

6th Grade

Discover more resources for Computers

18 questions

[AP CSP] JavaScript Programming Lesson 2025-2026

Lesson

•

9th - 12th Grade

9.2.1 Web Vulerabilities

What does OWASP stand for?

What is the primary goal of OWASP?

Why do websites want to give users interactive content?

What is the nature of the HTTP protocol in terms of retaining information?

What is a key ingredient to interactive browsing?

What is a session in the context of web browsing?

What must a website recognize to give continuity during a user's visit?

What is a Session ID?

Which of the following can be a Session ID?

Which of the following is NOT a form of Session ID?

Access all questions and much more by creating a free account

Similar Resources on Wayground

Popular Resources on Wayground

Discover more resources for Computers