A session ID is usually a randomly generated string to decrease the probability of obtaining a valid one by means of a brute-force search.
A session ID is typically a randomly produced string to lower the likelihood of obtaining a valid one through exhaustive testing.