Fundamentals of InfoSecintermediate
A web attack that tricks a logged-in user's browser into making an unwanted request is called cross-site request _____.
Answer
forgery
Explanation
### Why this is right
Cross-site request forgery uses a user's authenticated browser to send an unwanted request to a site where the user is already logged in. The material identifies one-time tokens as a prevention method.
### The concept
The attacker does not need to learn the user's password if the browser already carries valid credentials or session information. A one-time token helps the application verify that a request was intentionally generated through the legitimate interaction flow.
### Terms
- **Cross-site request forgery (CSRF)**: tricking an authenticated user's browser into making an unwanted request.
- **One-time token**: a value intended for a single request or use.
### Remember
CSRF abuses an existing logged-in session to trigger an unwanted action.
Related Questions
- Explain why computer security is described as a process rather than a product. Include the roles of technology, people, and environment.(intermediate)
- Select ALL items the review identifies as possible security risks or losses.(intermediate)
- Arrange these broad security activities in a sensible cycle, beginning with identifying what needs protection.(intermediate)
- A security product can replace the continuing work of managing people, technology, and the operating environment.(intermediate)
- Which statement best captures the course review’s view of computer security?(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free