CCSP: Certified Cloud Security Professional

By ISC · Question Mode

QuestionQ231

VerifiedCloud Application Security

Which of the following application and service threat types involves sending invalid, manipulated requests through a user's client to run commands on the application using that user's own credentials?

Explanation

Cross-site request forgery (CSRF) abuses an authenticated user’s client to submit attacker-chosen requests. Because the client carries the user’s active authentication context, the application can execute the requested action with that user’s credentials.

Community Discussion

No comments yet. Be the first to start the discussion!