CompTIA CySA+ CS0-003 Practice Question
Which of the following methods is the BEST practice for securely managing user sessions in a web application?
Storing session tokens in client-side local storage with anti-CSRF tokens
Enforcing session timeout policies after a short period of inactivity
Utilizing URL rewriting to append session tokens to each request
Implementing secure, HTTP-only cookies for session tokens