CCOA: Certified Cybersecurity Operations Analyst

By Isaca · Question Mode

QuestionQ30

VerifiedAdversarial Tactics, Techniques, and Procedures

Which of the following tactics is associated with API requests that could bypass access-control checks?

Explanation

Forced browsing involves directly requesting or guessing URLs or API endpoints to access protected resources or functions while bypassing intended access-control checks. OWASP lists force browsing as a means of bypassing access control and as a technique relevant to API authorization flaws.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!