CyberCertPrepSecurity FundamentalsWeb Security BasicsEASYFree question
What is Cross-Site Request Forgery (CSRF)?
- A.Forging a fake website certificate
- B.Injecting scripts into a website's source code
- C.Creating a copy of a legitimate website
- D.An attack that tricks a user's browser into making unwanted requests to a site where they are authenticated
Why D is correct
CSRF attacks exploit the trust a website has in a user's browser. If a user is logged into their bank, an attacker can craft a malicious page that causes the user's browser to send a request (like a money transfer) to the bank. The bank sees the request as legitimate because it includes the user's session cookie.
Know someone studying for Security Fundamentals? Send them this one.