Multiple choice technology security

How to stop forceful browsing?

  1. Check authorization on each page

  2. Name files with un-guessable names

  3. Place all accessible files in the same directory

  4. ACL's on the web root
Reveal answer Fill a bubble to check yourself
A Correct answer
Explanation

The only reliable way to prevent forceful browsing is checking authorization on every requested page before serving it. Naming schemes (B), directory organization (C), and ACLs (D) are all bypassable and do not enforce access control at the application level.

Keep practicing — related questions