D. session and browser are not valid settings for the expires attribute. now would expire the cookie immediately. By not setting an expires attribute at all, you create a browser session cookie.
A2:
A and D. CLIENT is the only variable types that is stored to disk, and J2EE session variables can be replicated between servers by the underlying J2EE server.
