CompTIA
CAS-005 · Question #140
A company runs a DAST scan on a web application. The tool outputs the following recommendations: - Use Cookie prefixes. - Content Security Policy - SameSite=strict is not set. Which of the following…
The correct answer is C. CSRF. The recommendations to use Cookie prefixes and set SameSite=strict relate directly to mitigating Cross-Site Request Forgery (CSRF) attacks by restricting how cookies are sent with cross-site requests.
Submitted by tom_us· Mar 6, 2026Security Engineering
Question
A company runs a DAST scan on a web application. The tool outputs the following recommendations:
- Use Cookie prefixes.
- Content Security Policy - SameSite=strict is not set.
Which of the following vulnerabilities has the tool identified?
Options
- ARCE
- BXSS
- CCSRF
- DTOCTOU
How the community answered
(32 responses)- A3% (1)
- B6% (2)
- C88% (28)
- D3% (1)
Explanation
The recommendations to use Cookie prefixes and set SameSite=strict relate directly to mitigating Cross-Site Request Forgery (CSRF) attacks by restricting how cookies are sent with cross-site requests.
Community Discussion
No community discussion yet for this question.