Multiple choice technology security

How to stop forceful browsing?

  1. Check authorization on each page

  2. Name files with un-guessable names

  3. Place all accessible files in the same directory

  4. ACL's on the web root
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

Forceful browsing (or directory traversal) attacks occur when users access unauthorized pages or resources by guessing URLs. The only effective prevention is checking authorization on every page request, ensuring users can only access resources they're permitted to see. Options B and C are security through obscurity and don't prevent access. Option D (ACLs on web root) is about file system permissions, not application-level authorization.

Keep practicing — related questions