Prevent HTTP Hijacking Assignment Answers

Question:

Which of the following approaches are helpful in preventing HTTP session hijacking attacks (select two)? Group of answer choices Adopting the micro-service architecture. Enforcing the same-origin policy Add HttpOnly flag in the HTTP response header. Adopting TLS Encrypting the session_id in cookies

Prevent HTTP Hijacking Answer and Explanation

- Adopting the micro-service architecture: While microservices can provide various benefits, preventing session hijacking is not a direct outcome of adopting a micro-service architecture. Security measures still need to be implemented at the application level.

- Add HttpOnly flag in the HTTP response header: This is generally a good security practice, but it is more related to preventing cross-site scripting (XSS) attacks rather than session hijacking. The HttpOnly flag prevents client-side scripts from accessing cookies, reducing the risk of XSS attacks.