CCSP: Certified Cloud Security ProfessionalDemo

By ISC · Question Mode

QuestionQ509

Cloud Application Security

Which threat type involves an application that fails to validate authorization for parts of itself after the user initially enters it?

  • A Cross-site request forgery
  • B Missing function-level access control
  • C Injection
  • D Cross-site scripting
Explanation

Missing function-level access control occurs when an application does not enforce authorization checks for individual functions or resources. A user who can access one area may therefore invoke functions that should require additional permissions.

Community Discussion

No comments yet. Be the first to start the discussion!