Which of the following is an attack that occurs when a malicious program causes a user's browser to perform an unwanted action on a trusted site for which the user is currently authenticated?

The correct answer is C. Cross-site request forgery. Cross-site request forgery (CSRF or XSRF) is an attack that tricks the victim's browser into executing unauthorized actions on a website where they are currently authenticated. In this scenario, the attacker exploits the trust that a site has in the user's browser, effectively…

Incident Handling and Response Technologies

Question

Options

ACross-site scripting
BInsecure direct object references
CCross-site request forgery
DSQL injection

How the community answered

(39 responses)

A
3% (1)
B
5% (2)
C
90% (35)
D
3% (1)

Explanation

Cross-site request forgery (CSRF or XSRF) is an attack that tricks the victim's browser into executing unauthorized actions on a website where they are currently authenticated. In this scenario, the attacker exploits the trust that a site has in the user's browser, effectively forcing the browser to perform actions without the user's knowledge or consent. For example, if the user is logged into their bank's website, an attacker could craft a malicious request to transfer funds without the user's direct interaction. CSRF attacks rely on authenticated sessions and typically target state-changing requests to compromise user or application data.

Topics

#CSRF#web application attack#browser exploitation#session abuse

Community Discussion

No community discussion yet for this question.

Full 212-89 Practice