Question

________________ are required because HTTP uses a lot of diverse TCP connections, so, the web server needs a means to distinguish every user’s connections.

(a) Internet

(b) Network

(c) Hijacking

(d) Sessions

The question was asked in an interview.

This is a very interesting question from Attack Vectors topic in section Understanding Attack Vectors of Cyber Security

Answer 1

Right answer is (d) Sessions

The best explanation: Sessions are required because HTTP uses a lot of diverse TCP connections, so, the web server needs the means to distinguish every user’s connections. Session hijacking attack is the exploitation of the web-session & its mechanism that is usually managed with a session token.