Salesforce
ARC-300 · Question #9
A B2C Commerce Developer has just finished implementing a new promotion code form on checkout. During review, an Architect notes that the form it not using CSRF validation correctly. Which two…
The correct answer is A. Ensure the CSRF protection is validated on form submission. D. Only use POST methods over HTTPS. See the full explanation below for the reasoning.
Question
A B2C Commerce Developer has just finished implementing a new promotion code form on checkout. During review, an Architect notes that the form it not using CSRF validation correctly. Which two options are best practice recommendations for dealing with CSRF validation? Choose 2 answers
Exhibit
Options
- AEnsure the CSRF protection is validated on form submission.
- BOnly use GET methods over HTTPS.
- CAutomatically renew the CSRF Token if expired.
- DOnly use POST methods over HTTPS.
How the community answered
(68 responses)- A81% (55)
- B7% (5)
- C12% (8)
Community Discussion
No community discussion yet for this question.