200-901 · Question #566
200-901 Question #566: Real Exam Question with Answer & Explanation
The correct answer is D: CSRF. Cross-Site Request Forgery (CSRF) is an OWASP threat that involves the forging of malicious HTTP requests into an application. In a CSRF attack, an attacker tricks a victim's browser into making a request on behalf of the victim to a target application where the victim is authent
Question
Which type of OWASP threat forges a malicious HTTP request into an application?
Options
- AClickjacking
- BSQL Injection
- CXSS
- DCSRF
Explanation
Cross-Site Request Forgery (CSRF) is an OWASP threat that involves the forging of malicious HTTP requests into an application. In a CSRF attack, an attacker tricks a victim's browser into making a request on behalf of the victim to a target application where the victim is authenticated. This can lead to unauthorized actions being performed on the target application without the victim's consent.
Topics
Community Discussion
No community discussion yet for this question.