chose corect answar only

Question 4 Not yet answered Marked out of 1.00 P Flag question Which of the following sentences is incorrect with respect to HTTP? O a. Most of GET requests do not have a message body O b. All HTTP messages consist of an optional body followed by one message header c. Attackers can obtain sensitive information by observing the contents of POST request message O d. The POST method is used to request the web server to accept the data enclosed in the body Question 5 Not yet answered Marked out of 1.00 P Flag question Which one of the following web application vulnerability may allow the attacker to execute malicious code in the victim machine? O a. Cross-site scripting O b. Broken access control O c. Cross-site request forgery O d. Broken authentication Question 6 Not yet answered Marked out of 1.00 Flag question You have been asked to design a secured and strong session token handling method, which of the following methods would you use? O a. Encrypt the session token before submitting to the server b. Save the session token in server's log O c. Transmit the session token via the URL parameters O d. Transmit the session token using hidden form field