Question: What is a potential risk of storing session data without proper expiration controls in web applications?

Answer:

Storing session data without proper expiration controls increases the risk of session hijacking and unauthorized access, as expired session data may still be accessible.

MCQ: What is a potential risk of storing session data without proper expiration controls in web applications?

A. Storing session data without expiration controls poses no risk
B. Improved security due to the persistence of session data
C. Increased risk of session hijacking and unauthorized access if session data is not properly expired
D. Compressed application code automatically handles expiration controls in stored session data

Correct Answer: A. Storing session data without expiration controls poses no risk

Explanation:

Storing session data without proper expiration controls increases the risk of session hijacking and unauthorized access, as expired session data may still be accessible.