16. An attacker somehow obtains an unsuspecting user’s SID and then using it to impersonate the user in order to gain potentially sensitive information. This attack is known as..

1. 1. session-copy

   
   
   

   2. session-hijack

   
   
   

   3. session-fixation

   
   
   

   4. session-fixing

   
   
   

   5. None of these

   
   
   

---

1. View Hint View Answer Discuss in Forum

   NA

   Correct Option: C

   You can minimize this risk by regenerating the session ID on each request while maintaining the session-specific data. PHP offers a convenient function named session_regenerate_id() that will replace the existing ID with a new one.

---

17. Which parameter determines whether the old session file will also be deleted when the session ID is regenerated?

1. 1. delete_session_file

   
   
   

   2. delete_old_file

   
   
   

   3. delete_old_session

   
   
   

   4. delete_old_session_file

   
   
   

   5. None of these

   
   
   

---

1. View Hint View Answer Discuss in Forum

   NA

   Correct Option: C

   By default, this behavior is disabled.

---

---

18. Which function effectively deletes all sessions that have expired?

1. 1. session_expired_delete()

   
   
   

   2. session_delete()

   
   
   

   3. session_destroy()

   
   
   

   4. session_garbage_collect()

   
   
   

   5. None of these

   
   
   

---

1. View Hint View Answer Discuss in Forum

   NA

   Correct Option: D

   session_garbage_collect()

---

19. Which function is used to transform PHP’s session-handler behavior into that defined by your custom handler?

1. 1. session_set_save_handler()

   
   
   

   2. Session_handler()

   
   
   

   3. session_save_handler()

   
   
   

   4. session_set_save()

   
   
   

   5. None of these

   
   
   

---

1. View Hint View Answer Discuss in Forum

   NA

   Correct Option: A

   session_set_save_handler()

---

---

20. The session_start() function must appear..

1. 1. after the body tag

   
   
   

   2. before the body tag

   
   
   

   3. before the html tag

   
   
   

   4. after the html tag

   
   
   

   5. None of these

   
   
   

---

1. View Hint View Answer Discuss in Forum

   NA

   Correct Option: C

   Like this:

---