Zend
200-530 · Question #493
Which of the following are the limitations for the cross site request forgery (CSRF) attack? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is B. The attacker must determine the right values for all the form inputs. D. The attacker must target a site that doesn't check the referrer header. See the full explanation below for the reasoning.
Question
Which of the following are the limitations for the cross site request forgery (CSRF) attack? Each correct answer represents a complete solution. Choose all that apply.
Options
- AThe target site should have limited lifetime authentication cookies.
- BThe attacker must determine the right values for all the form inputs.
- CThe target site should authenticate in GET and POST parameters, not only cookies.
- DThe attacker must target a site that doesn't check the referrer header.
How the community answered
(27 responses)- A11% (3)
- B70% (19)
- C19% (5)
Community Discussion
No community discussion yet for this question.