CompTIA CySA+ CS0-003 (V3) Practice Question

Because HTTP is stateless, web applications need a way to remember the same user between requests. In this capture the server sends and the browser returns a Set-Cookie/Cookie header containing SESSIONID. The browser automatically resends that cookie with every request to the same domain, allowing the server to link each request to the corresponding session data it stores. Browser caching does not convey per-user identity, JSON Web Tokens would appear in an Authorization header, and TLS encryption only protects the channel but does not provide state management.