EC-Council
312-49V8 · Question #93
Identify the attack from following sequence of actions? Step 1: A user logs in to a trusted site and creates a new session Step 2: The trusted site stores a session identifier for the session in a…
The correct answer is C. Cross-Site Request Forgery (CSRF) Attack. See the full explanation below for the reasoning.
Question
Identify the attack from following sequence of actions? Step 1: A user logs in to a trusted site and creates a new session Step 2: The trusted site stores a session identifier for the session in a cookie in the web browser Step 3: The user is tricked to visit a malicious site Step 4: the malicious site sends a request from the user's browser using his session cookie
Options
- AWeb Application Denial-of-Service (DoS) Attack
- BCross-Site Scripting (XSS) Attacks
- CCross-Site Request Forgery (CSRF) Attack
- DHidden Field Manipulation Attack
How the community answered
(26 responses)- A15% (4)
- B4% (1)
- C73% (19)
- D8% (2)
Community Discussion
No community discussion yet for this question.