What component of a web application that stores the session state in a cookie can be bypassed by an

What component of a web application that stores the session state in a cookie can be bypassed by
an attacker?

A.
An initialization check

B.
An identification check

C.
An authentication check

D.
An authorization check