When exporting a price book from an external system, which file format or formats should a developer use so it can be imported into a B2C Commerce site?

A retailer notices that the Account Addresses page is showing the wrong shopper's address.
Which tool should the developer start with to identify the issue?

A B2C Commerce Developer has just finished implementing a new promotion code form on checkout. During review, an Architect notes that the form it not using CSRF validation correctly.

Which two options are best practice recommendations for dealing with CSRF validation? Choose 2 answers

A developer is checking for Cross Site Scripting (XSS) and found that the quick search is not escaped (allows inclusion of Javascript) in the following script:

How would the developer resolve this issue?

A Digital Developer must give users the ability to choose an occasion (holiday, birthday, anniversary, etc.) for which gifts are currently being selected. The data needs to be persistent throughout the current shopping experience.
Which data store variable is appropriate, assuming there is no need to store the selection in any system or custom objects?