Adobe Exam AD0-E704 Topic 6 Question 54 Discussion

Actual exam question for Adobe's AD0-E704 exam

Question #: 54
Topic #: 6

Magento uses the HTTPOnly flag when setting cookies for security reasons. There is also a system configuration setting available in the Cookie Settings to turn it on and off. What is the purpose of this flag?

ATo prevent cookies from being intercepted via a CSRF attack

BTo prevent cookies from being accessible via JavaScript

CTo prevent Cross Site Tracing (XST) attacks

DTo prevent cookies from being delivered over HTTPS

Show Suggested Answer

Suggested Answer: C

by Norah at Dec 08, 2024, 12:37 PM

Limited Time Offer

25%

Off

Get Premium AD0-E704 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Patria

1 months ago

B) To prevent cookies from being accessible via JavaScript - Bingo! HTTPOnly is the cookie security superhero, protecting our cookies from those sneaky JavaScript villains. Now, where's my cape?

upvoted 0 times

Jenelle

4 days ago

A) To prevent cookies from being intercepted via a CSRF attack

upvoted 0 times

...

Maryanne

1 months ago

D) To prevent cookies from being delivered over HTTPS - Oof, that's a big no-no. HTTPOnly is all about keeping the cookies away from JavaScript, not the other way around.

upvoted 0 times

Nelida

9 days ago

D) To prevent cookies from being delivered over HTTPS - Oof, that's a big no-no. HTTPOnly is all about keeping the cookies away from JavaScript, not the other way around.

upvoted 0 times

...

Bernadine

10 days ago

B) To prevent cookies from being accessible via JavaScript

upvoted 0 times

...

Lindsey

17 days ago

A) To prevent cookies from being intercepted via a CSRF attack

upvoted 0 times

...

Elden

2 months ago

C) To prevent Cross Site Tracing (XST) attacks - Haha, nice try, but I don't think XST is a real thing. Maybe the person who wrote this question was just trying to be fancy and confuse us.

upvoted 0 times

Margot

10 days ago

C) To prevent Cross Site Tracing (XST) attacks - Haha, nice try, but I don't think XST is a real thing. Maybe the person who wrote this question was just trying to be fancy and confuse us.

upvoted 0 times

...

Tambra

12 days ago

B) To prevent cookies from being accessible via JavaScript

upvoted 0 times

...

Jovita

25 days ago

A) To prevent cookies from being intercepted via a CSRF attack

upvoted 0 times

...

Yvonne

2 months ago

A) To prevent cookies from being intercepted via a CSRF attack - Hmm, not quite. That's what the CSRF token is for. HTTPOnly is all about keeping JavaScript away from our precious cookies.

upvoted 0 times

...

Niesha

2 months ago

I believe the HTTPOnly flag is important for security reasons, as it helps prevent sensitive cookie information from being stolen in a CSRF attack.

upvoted 0 times

...

Karan

2 months ago

I agree with Sylvie. It helps protect against XSS attacks by preventing JavaScript from accessing the cookie data.

upvoted 0 times

...

Jettie

2 months ago

B) To prevent cookies from being accessible via JavaScript - That's the purpose of the HTTPOnly flag, right? Gotta keep those cookies secure from those pesky JavaScript hackers!

upvoted 0 times

Darell

29 days ago

Exactly! It's an important security measure to protect sensitive information stored in cookies.

upvoted 0 times

...

Darell

1 months ago

Yes, that's correct! The HTTPOnly flag prevents cookies from being accessed by JavaScript.

upvoted 0 times

...

Sylvie

2 months ago

I think the purpose of the HTTPOnly flag is to prevent cookies from being accessible via JavaScript.

upvoted 0 times

...