GIAC
GWAPT · Question #18
What is the primary purpose of a Cross-Site Request Forgery (CSRF) attack?
The correct answer is B. To trick a victim into performing unwanted actions on a trusted website. See the full explanation below for the reasoning.
Question
What is the primary purpose of a Cross-Site Request Forgery (CSRF) attack?
Options
- ATo inject malicious SQL commands into a database
- BTo trick a victim into performing unwanted actions on a trusted website
- CTo exploit authentication bypass vulnerabilities
- DTo steal session cookies through a client-side script
How the community answered
(24 responses)- A8% (2)
- B71% (17)
- C17% (4)
- D4% (1)
Community Discussion
No community discussion yet for this question.