Multiple ChoiceHard 30s
Session fixation
Choose the best answer for: session attack
Options
- 1No sessions are used, avoiding session fixation entirely
- 2Regenerate session ID after login to prevent fixation
- 3Keep the same ID after login so the session is consistent
- 4Only for JWTs: regenerate IDs solely with token auth
Think you can answer under pressure?
Get matched and answer live questions in 3-minute 1v1 battles. Elo ranking, badge tiers and bragging rights on the line.