What type of attack attempts to exploit the trust relationship between a user client based browser and server based websites forcing the submission of an authenticated request to a third party site?
Suggested Answer: D
Get Premium CISMP-V9 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
10 comments · newest first
JA
Jarvis
11 months ago
Nah, SQL Injection is way more common than CSRF.
LA
Lashaunda
12 months ago
Wait, CSRF? I didn't know it was that specific!
VA
Valentine
12 months ago
Parameter tampering is a different thing, right?
DE
Denna
12 months ago
I thought it was XSS at first, but CSRF makes more sense.
RO
Rodrigo
1 year ago
Definitely CSRF, it's all about that trust issue!
NA
Natalie
1 year ago
Hmm, I'm a bit unsure about this one. I'm not sure if it's my place as the Scrum Master to get involved in the budget discussion, since it seems like the Product Owner's meeting. Maybe I'd just try to keep things calm and ask for a short break to let people cool off.
TA
Tanja
1 year ago
Hmm, I'm not sure about this one. I'll have to think it through carefully. Maybe I can find some examples in the documentation to help me figure it out.
GO
Golda
1 year ago
I'm not totally confident on this one. I'll have to guess and hope for the best.
JE
Jerry
1 year ago
I'm confident that option B is the correct answer. The use of data from connected devices to make decisions that impact individuals is a prime example of the privacy concerns surrounding the Internet of Things. This is the most relevant and specific choice.
LA
Lawana
1 year ago
I feel confident about this one. The SMTP filter is definitely the way to go. Block that domain and move on to the next question.