Skills101
← All practice quizzes

Quiz: HTTPS, Cookies and Headers

5 questionsNo time limitPass: 60%+10 XP on first pass

How HTTPS protects data in transit, what HttpOnly, Secure and SameSite do on cookies, and the security headers (HSTS, CSP, X-Content-Type-Options, frame-ancestors) that block whole classes of attacks.

Log in to take the quiz

Free account · see your score, answers and explanations, earn XP

  1. Question 1

    Which cookie flag stops JavaScript (and therefore most XSS attacks) from reading the session cookie?

  2. Question 2

    What does the HSTS header do?

  3. Question 3

    A site with a valid HTTPS certificate is:

  4. Question 4

    Which header helps prevent clickjacking?

  5. Question 5

    In the header checker output, why is the cookie flagged even though it has Secure?