212-82: Certified Cybersecurity TechnicianDemo

By ECCouncil · Question Mode

QuestionQ116

Application Security and Cloud Computing

Conduct a vulnerability analysis of the web application, www.luxurytreats.com, and identify the name of the alert with WASC ID 9. (Practical Question)

  • A Absence of Anti-CSRF Tokens
  • B Viewstate without MAC Signature
  • C X-Frame-Options Header Not Set
  • D Application Error Disclosure
Explanation

WASC-09 is Cross-Site Request Forgery (CSRF). Anti-CSRF tokens help verify that a state-changing request originated from the intended application context; their absence is therefore reported as an anti-CSRF-token vulnerability.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!