CCSP: Certified Cloud Security ProfessionalDemo

By ISC · Question Mode

QuestionQ201

Cloud Application Security

Which of the following threat types involves an application that fails to validate authorization for parts of itself after the initial checks?

  • A Injection
  • B Missing function-level access control
  • C Cross-site request forgery
  • D Cross-site scripting
Explanation

Missing function-level access control occurs when an application exposes functionality without enforcing authorization each time that function is accessed. OWASP identifies this as broken function-level authorization and recommends authorization checks for every function.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!