Privacy, Cookies & Storage — Test 1

Correct Answer: C. It stops browsing history, cookies, and form data from being saved on the local device after the session
Explanation: Your IP address and network traffic are still visible to your network, ISP, and the websites you visit. ALSO KNOW (related points): • Which browser storage option suits large amounts of structured data, including for offline web apps? → IndexedDB • What happens when you clear a browser's cookies for a site? → You are typically logged out, because session identifiers are stored in cookies • What is browser fingerprinting? → Identifying a user by combining many browser and device characteristics, without needing cookies

Correct Answer: B. It prevents JavaScript (document.cookie) from reading the cookie, which reduces the impact of XSS
Explanation: The Secure attribute is what restricts a cookie to HTTPS connections.

Correct Answer: A. Lax
Explanation: SameSite=None must be paired with the Secure attribute. ALSO KNOW (related points): • What does Google Safe Browsing do in Chrome, Firefox, and Safari? → It warns users before they visit known phishing or malware sites • What does DNS over HTTPS (DoH) in browsers do? → It encrypts DNS lookups inside HTTPS, so on-path observers cannot read them easily

Correct Answer: D. About 4 KB
Explanation: localStorage is typically about 5 MB per origin.

Correct Answer: C. localStorage persists across sessions; sessionStorage is cleared when the tab is closed and is separate for each tab
Explanation: Both store string key-value pairs and are scoped to an origin.

Correct Answer: B. IndexedDB
Explanation: IndexedDB is asynchronous and transactional, and it can store objects and files.

Correct Answer: A. You are typically logged out, because session identifiers are stored in cookies
Explanation: Saved passwords are stored separately in the password manager.

Correct Answer: B. It warns users before they visit known phishing or malware sites
Explanation: Microsoft Edge uses Microsoft Defender SmartScreen for the same purpose.

Correct Answer: C. Identifying a user by combining many browser and device characteristics, without needing cookies
Explanation: Fingerprinting still works in private browsing mode, which is why Tor and Brave try to resist it.

Correct Answer: A. It encrypts DNS lookups inside HTTPS, so on-path observers cannot read them easily
Explanation: Firefox, Chrome, and Edge all support DoH.