A method used to maintain state in HTTP communications across requests is the use of cookies.

A method used to maintain state in HTTP communications across requests is the use of cookies.

• A. Cookies are used to maintain state across requests
• B. HTTP is stateless by default
• C. Cookies are blocked by default in browsers
• D. TLS is required for all stateful HTTP sessions

Answer: (C)

Maintaining state across HTTP requests is achieved by cookies. When a server wants to remember something about a user between requests—like a login session or items in a shopping cart—it can send a Set-Cookie header. The browser stores that cookie and automatically includes it in subsequent requests to the same domain, so the server can recognize the user and retrieve the stored state. This is essential because HTTP itself is stateless, meaning each request stands alone unless there’s a mechanism to persist information. The best choice directly describes this mechanism: cookies are used to maintain state across requests. The statement that HTTP is stateless by default explains why cookies exist, but it doesn’t describe the method itself. The claim that cookies are blocked by default in browsers is not generally true; cookies are allowed by default with controls to block third-party cookies in some scenarios. The idea that TLS is required for all stateful HTTP sessions is incorrect—state can be maintained over HTTP or HTTPS, though TLS is recommended for security.

Maintaining state across HTTP requests is achieved by cookies. When a server wants to remember something about a user between requests—like a login session or items in a shopping cart—it can send a Set-Cookie header. The browser stores that cookie and automatically includes it in subsequent requests to the same domain, so the server can recognize the user and retrieve the stored state. This is essential because HTTP itself is stateless, meaning each request stands alone unless there’s a mechanism to persist information.

The best choice directly describes this mechanism: cookies are used to maintain state across requests.

The statement that HTTP is stateless by default explains why cookies exist, but it doesn’t describe the method itself. The claim that cookies are blocked by default in browsers is not generally true; cookies are allowed by default with controls to block third-party cookies in some scenarios. The idea that TLS is required for all stateful HTTP sessions is incorrect—state can be maintained over HTTP or HTTPS, though TLS is recommended for security.