Your enterprise is hosting a web app that has limited security. As a security administrator, you are asked to take appropriate measures to restrict threat actors from hijacking users' sessions. Which of the following is the most appropriate action for you to take?
a. You should implement cryptography using OpenSSL.
b. You should encrypt the session ID displayed on the URL.
c. You should provide each user a unique static session ID.
d. You should mention "log off after visit" on the web app.
