Multiple choice technology security

A cross-site request forgery (CSRF) vulnerability occurs when

  1. If the request does not contain a nonce that proves its provenance

  2. The application acts on an HTTP request without verifying that the request was made with the user's consent

  3. A Web application uses session cookies

  4. All the above
Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

CSRF vulnerabilities arise when applications rely on automatically transmitted session cookies, execute requests without explicit user consent checks, and fail to use unpredictable, transaction-specific nonces. Since all these conditions facilitate Cross-Site Request Forgery, all options are correct.

Keep practicing — related questions