Cookie-Based Session Management CASENET Practice Questions (Page 10)

Questions 46–47

1. 46foundation · easy

   What is a common anomaly-detection technique to detect session hijacking?

   • AMonitoring for sudden changes in user-agent or IP address
   • BRequiring the user to re-enter their password on every request
   • CBinding the session to the user's IP address and rejecting any change
   • DStoring the session ID in a persistent cookie
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A developer is implementing a custom session ID generator for an ASP.NET application. The current implementation uses Random.Next() to generate a 32-bit integer. A security review flags this as weak. Which replacement should the developer use?

   • AUse the user's IP address and timestamp
   • BUse Guid.NewGuid().ToString()
   • CUse Environment.TickCount.ToString()
   • DUse RandomNumberGenerator.GetBytes() to generate a 128-bit random value and encode it as a string
   Reveal Solution Discussion Select an answer first