Multiple choice technology security

Which of the following should be stored in the cookie?

  1. Session ID

  2. Account Privileges

  3. UserName

  4. Password
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Only the Session ID should be stored in a cookie - it's an opaque reference to server-side session data. Storing privileges, username, or especially passwords in cookies exposes sensitive information to theft (XSS, sniffing, physical access) and violates the principle of storing only identifiers, not authoritative data, on the client.

Keep practicing — related questions