Zend
ZF-100-500 · Question #107
Which of the following are the limitations for the cross site request forgery (CSRF) at tack? Each correct answer represents a complete solution. Choose all that apply.
The correct answer is B. The attacker must determine the right values for all the form inputs. C. The attacker must target a site that doesn't check the referrer header. See the full explanation below for the reasoning.
Question
Which of the following are the limitations for the cross site request forgery (CSRF) at tack? Each correct answer represents a complete solution. Choose all that apply.
Options
- AThe target site should authenticate in GET and POST parameters, not only cookies.
- BThe attacker must determine the right values for all the form inputs.
- CThe attacker must target a site that doesn't check the referrer header.
- DThe target site should have limited lifetime authentication cookies.
How the community answered
(16 responses)- A19% (3)
- B75% (12)
- D6% (1)
Community Discussion
No community discussion yet for this question.