CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ93

VerifiedIdentity and Access Management (IAM)

An attack that uses social engineering and a malicious Uniform Resource Locator (URL) link to exploit a victim's existing browser session with a web application is an example of which of the following attack types?

Explanation

Cross-site request forgery (CSRF) causes an authenticated user’s browser to submit an unintended request to a trusted web application. Social engineering can lure the user to a malicious link, while the browser automatically includes the existing session credentials with the request.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!