MENU
Which type of OWASP threat forges a malicious HTTP request into an application?
Suggested Answer: C
Get Premium 200-901 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Cross-Site Request Forgery (CSRF) is a type of attack that forges a malicious HTTP request and sends it from a user's browser to a different site where the user is authenticated. The attacker tricks the user into executing unwanted actions on a web application in which the user is currently authenticated. This can lead to unauthorized actions being performed on the user's behalf.
Cisco DevNet Associate Certification Guide
OWASP CSRF Prevention Cheat Sheet
40 comments · newest first
BO
Bo
10 months ago
I thought SQL Injection was the main one for this.
CH
Chau
10 months ago
Totally agree, CSRF is sneaky like that.
CA
Carline
10 months ago
CSRF is the one that forges malicious requests!
MA
Margret
11 months ago
Clickjacking is more about UI manipulation, not requests.
BR
Brock
11 months ago
Wait, isn't XSS also a threat?
CY
Cyndy
11 months ago
I feel like XSS could be related, but it’s more about injecting scripts rather than forging requests. CSRF seems more likely to be the right choice.
RO
Roxane
11 months ago
Clickjacking sounds familiar, but I don't think it directly forges requests. I might be mixing it up with something else.
LA
Layla
11 months ago
I remember practicing a question about SQL Injection, but that doesn't really fit with HTTP requests like CSRF does.
GA
Gail
12 months ago
I think the answer might be CSRF since it involves forging requests, but I'm not completely sure.
TW
Twana
12 months ago
I've got a good handle on OWASP threats, and I think CSRF is the one that fits this question best. Forging a malicious HTTP request is the key characteristic.
MA
Maryann
1 year ago
I'm a bit confused on the differences between these OWASP threats. Maybe I should review my notes before answering this one.
LY
Lyndia
1 year ago
Okay, let's see... CSRF sounds like the right answer here, as it involves forging a malicious HTTP request. I'll go with that.
MA
Matilda
1 year ago
Hmm, I'm a bit unsure about this one. I'll have to think it through carefully to make sure I don't mix up the different OWASP threats.
MY
Myra
1 year ago
I'm pretty sure this is a CSRF (Cross-Site Request Forgery) attack, where an attacker forges a malicious HTTP request to the application.
KR
Kristin
1 year ago
I'm going with C. CSRF. It's like the chameleon of web attacks - blends right in with the rest of the traffic. Sneaky stuff!
DE
Deja
1 year ago
C. CSRF. I've heard it's like the ninja of web attacks - stealthy and hard to detect. Gotta stay on your toes!
EV
Evangelina
1 year ago
C. CSRF. I've heard it's like the ninja of web attacks - stealthy and hard to detect. Gotta stay on your toes!
LU
Lucina
1 year ago
D) XSS
KI
Kindra
1 year ago
C) CSRF
IV
Ivette
1 year ago
B) SQL Injection
TA
Tamra
1 year ago
A) Clickjacking
EL
Elvera
1 year ago
Hmm, I'd say B. SQL Injection. You can use that to manipulate the database and do all sorts of nasty things.
LE
Lea
1 year ago
I agree, it's crucial to have proper security measures in place to prevent SQL Injection.
BR
Brandon
1 year ago
Definitely, it's important to protect against SQL Injection attacks.
KA
Katina
1 year ago
Yeah, SQL Injection is a serious threat. It can really mess up a database.
ST
Stephen
1 year ago
D) XSS
VA
Vannessa
1 year ago
C) CSRF
KI
Kiera
1 year ago
C) CSRF
ED
Eden
1 year ago
That's correct. SQL Injection is a serious threat that can allow attackers to manipulate the database.
CA
Catalina
1 year ago
B) SQL Injection
AB
Abel
1 year ago
B) SQL Injection
MA
Marion
1 year ago
A) Clickjacking
AL
Alonzo
1 year ago
I believe the correct answer is C) CSRF because it involves forging malicious requests.
LO
Lonny
1 year ago
I'm not sure, but I think XSS could also be a possibility.
JA
Jaclyn
1 year ago
I agree with Lawrence, CSRF seems like the right choice.
RE
Remona
1 year ago
CSRF, for sure! That's when you trick a user into making a malicious request to the app. Gotta watch out for those sneaky hackers!
BR
Brande
1 year ago
Definitely! It's important to implement proper security measures to prevent CSRF attacks.
SE
Sena
1 year ago
Yes, CSRF is a serious threat. It can lead to unauthorized actions being performed on behalf of the user.
SA
Samira
1 year ago
CSRF, for sure! That's when you trick a user into making a malicious request to the app. Gotta watch out for those sneaky hackers!
LA
Lawrence
1 year ago
I think the answer is C) CSRF.