A. Incorrect: localStorage is HTML5 and is not available in all browsers.
B. Correct: Query string information is available across all browsers and is usable on both the client and server.
C. Incorrect: Although ViewState is available in a form field on the page, it is encrypted and cannot be used on the client side. It is also not used by many ASP.NET MVC 4 constructs.
D. Correct: Cookies can be stored for a period of time on the client and be read from either client- or server-side operations.