Which of the following types of web-based attack is happening when an attacker is able to send a well-crafted, malicious request to an authenticated user without the user realizing it?

The correct answer is B. Cross-Site request forgery (CSRF). The type of attack you're describing, where an attacker sends a malicious request to an authenticated user without them realizing it, is a Cross-Site Request Forgery (CSRF) attack. In a CSRF attack, the attacker tricks the victim (who is already authenticated on a website) into m

Submitted by suresh_in· Mar 5, 2026Software Development Security

Question

Options

Aross-Site Scripting (XSS)
BCross-Site request forgery (CSRF)
CCross injection
DBroken Authentication And Session Management

How the community answered

(42 responses)

A
7% (3)
B
88% (37)
C
2% (1)
D
2% (1)

Explanation

The type of attack you're describing, where an attacker sends a malicious request to an authenticated user without them realizing it, is a Cross-Site Request Forgery (CSRF) attack. In a CSRF attack, the attacker tricks the victim (who is already authenticated on a website) into making an unwanted request to that site, often causing the victim to unknowingly perform actions such as changing account settings or transferring funds. So the correct answer is B.

Topics

#CSRF#web application attacks#session hijacking#authenticated users

Community Discussion

No community discussion yet for this question.

Full CISSP Practice