Oracle Application Express 5: Developing Web Applications — Question 37

Which best describes how Session State Protection works?

Answer options

• A. saves sensitive data in Oracle Application Express session state tables in encrypted form, stopping users from tampering with the data
• B. adds checksums to Page Access Protection attributes and Session State Protection item attributes to prevent alteration of session state
• C. saves data in Oracle Application Express session state tables in encrypted form and uses the Page Access Protection attributes and the Session State Protection item attributes with checksums to prevent alteration of session state
• D. encrypts the values supplied in the URL to prevent reading of the values

Correct answer: B

Explanation

The correct answer is B, as it specifically mentions the use of checksums in both Page Access Protection and Session State Protection attributes to ensure the integrity of session state. Option A focuses solely on data encryption without mentioning checksums, while option C includes encryption but adds complexity beyond the basic description of how Session State Protection functions. Option D is incorrect because it addresses URL encryption rather than session state protection mechanisms.