Free CompTIA CySA+ CS0-003 Practice Question

Implementing session timeouts helps ensure that sessions do not remain active indefinitely. This reduces the risk of session hijacking where an attacker can take control of an unattended session that remains active for an extended period of time. Limiting session duration is a fundamental security best practice in session management. While encrypting session IDs and using HTTP cookies with secure flags are also important, they do not directly address the issue of indefinite session duration.