I'm working on an assessment for our Information Security department and they have some questions with regards to session management. Can anyone provide me guidance as to how the pega application handles the following...

How are session cookies generated?

How are they secured to prevent hijacking?

How is persistent session state secured?

Thank you