MCQ: How can attackers exploit insufficient session timeout settings in web applications?

• A. Insufficient session timeout settings have no impact on security
• B. Improved security due to longer session timeouts
• C. Increased risk of unauthorized access and session hijacking if sessions do not expire promptly
• D. Compressed application code automatically ensures security regardless of session timeout settings