Multiple choice technology security

Which among the following do you think will prevent a CSRF attack?

  1. /transfer.asp?fromacct=”account1”&toaccount=”account2”&amount=200.45&trnsactToken=”121431ersw”

  2. /email.jsp&to=”[email protected]”&subject=”hi”

  3. Use https for all secured pages

  4. Use encryption for session cookies
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Anti-CSRF tokens like the trnsactToken in option A prevent CSRF by including an unpredictable, session-bound value that attackers can't guess. HTTPS and cookie encryption protect against different threats (eavesdropping), not CSRF.

Keep practicing — related questions