A developer is debugging a caching issue. The server sends the following headers for a JSON API response: Cache-Control: no-cache, ETag: "abc123". A client requests the resource again. What will the browser do?

Use the cached response without contacting the server

Block the request because no-cache and ETag cannot be used together

Discard the cached response and make a full new request without any conditional headers

Send a conditional request with If-None-Match: "abc123" to revalidate

A web application uses session cookies for authentication. A security auditor warns that an attacker could steal a user's session ID and impersonate them. Which additional measure would most directly mitigate this risk?

Increasing the session timeout to 24 hours

Setting the Secure attribute on the session cookie

Storing the session ID in a URL query string

Disabling cookies entirely and using HTTP Basic Authentication

LPI Web Development Essentials

Domain 1Objective 3

031.3 HTTP Basics (weight: 3) WEB-DEVELOPMENT-ESSENTIALS Practice Questions (Page 10)

Part of the 031 Software Development and Web Technologies domain, which makes up ~28% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~7–11 in this domain), expect 2–4 from this objective — we provide 47 practice questions to prepare you well beyond it. (estimate)

47questions here

10free pages

16concepts

Questions 46–47

46expert · hard
A developer is debugging a caching issue. The server sends the following headers for a JSON API response: Cache-Control: no-cache, ETag: "abc123". A client requests the resource again. What will the browser do?
Select an answer first
47application · medium
A web application uses session cookies for authentication. A security auditor warns that an attacker could steal a user's session ID and impersonate them. Which additional measure would most directly mitigate this risk?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to WEB-DEVELOPMENT-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “WEB-DEVELOPMENT-ESSENTIALS” is a trademark of its owner, used for identification only.

031.3 HTTP Basics (weight: 3) WEB-DEVELOPMENT-ESSENTIALS Practice Questions (Page 10)

Questions 46–47

A developer is debugging a caching issue. The server sends the following headers for a JSON API response: Cache-Control: no-cache, ETag: "abc123". A client requests the resource again. What will the browser do?

A web application uses session cookies for authentication. A security auditor warns that an attacker could steal a user's session ID and impersonate them. Which additional measure would most directly mitigate this risk?

Keep studying — 031 Software Development and Web Technologies