CompTIA Security+ SY0-501

Question1 / 13

Set · 2026-10

What is the main purpose of the HttpOnly cookie attribute?

Select one

Report an error

The exam and question are included automatically.

Questions & review
CorrectIncorrectUnanswered
2026-10 · 53 practice questions with explanations

Original, independent study material. This is not an official exam paper.

The exam code in this catalog entry is retired. This 2026-10 set reviews foundational concepts; it does not claim alignment with a current replacement exam blueprint.

13 questions on this page
  1. What is the main purpose of the HttpOnly cookie attribute?

  2. An employee receives a call requesting an urgent password reset for an executive. What should happen first?

  3. Which security property is most directly harmed when a service cannot be used by authorized users?

  4. What is the purpose of a certificate authority in public-key infrastructure?

  5. Which control reduces exposure from an unused network service?

  6. Why separate production and development credentials?

  7. What is the principal value of a tested offline or otherwise isolated backup?

  8. Which activity belongs in security awareness training?

  9. A security analyst compares an original file hash with a later copy. What is being checked?

  10. Which mechanism can limit automated online password guessing?

  11. What is a security baseline?

  12. Why retain only necessary personal data?

  13. An alert is determined to describe authorized normal activity. What does this represent?

Exam comments