SY0-701 · Question #287
A website user is locked out of an account after clicking an email link and visiting a different website Web server logs show the user's password was changed, even though the user did not change the p
The correct answer is A. Cross-sue request forgery. The scenario describes a situation where a user unknowingly triggers an unwanted action, such as changing their password, by clicking a malicious link. This is indicative of a Cross-Site Request Forgery (CSRF) attack, where an attacker tricks the user into executing actions they
Question
A website user is locked out of an account after clicking an email link and visiting a different website Web server logs show the user's password was changed, even though the user did not change the password. Which of the following is the most likely cause?
Options
- ACross-sue request forgery
- BDirectory traversal
- CARP poisoning
- DSQL injection
How the community answered
(42 responses)- A60% (25)
- B7% (3)
- C12% (5)
- D21% (9)
Explanation
The scenario describes a situation where a user unknowingly triggers an unwanted action, such as changing their password, by clicking a malicious link. This is indicative of a Cross-Site Request Forgery (CSRF) attack, where an attacker tricks the user into executing actions they did not intend to perform on a web application in which they are authenticated.
Community Discussion
No community discussion yet for this question.