A. It determines whether the session cookie is secure (only sent over HTTPS)
B. It sets the expiration time for session cookies
C. It configures the path for session cookies
D. It defines the session engine to be used

Solution

A. It determines whether the session cookie is secure (only sent over HTTPS)