A review of purchases made at an online retailer shows that several orders were processed for items at an unpublished price.
Which protection can a Citrix Engineer implement to prevent a site visitor from modifying the unit price of a product on the shopping cart page?
Suggested Answer: B
Get Premium 1Y0-341 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
9 comments · newest first
YA
Yan
12 months ago
SQL Injection isn't relevant to this issue, right?
LY
Lyndia
12 months ago
Definitely need to prevent price tampering!
LI
Lindsey
1 year ago
Wait, can XSS really affect pricing? Sounds odd.
SU
Sue
1 year ago
I think Form Field Consistency is more effective here.
LO
Lorriane
1 year ago
CSRF is a common protection method.
LI
Lisbeth
1 year ago
I've seen this type of issue before. Replacing the percent sign with two percent signs should do the trick.
JO
Jose
1 year ago
Okay, I think the key here is understanding that the perimeter service itself can be a point of failure. I'll need to consider how to protect that service from attacks.
JA
Jacklyn
1 year ago
Okay, let me think this through. I know WCF is the recommended connection mode, but I'm not sure about the details on NET remoting. I'll need to review that part carefully.
WI
Wilda
1 year ago
Okay, I think I've got it. The higher numbered policy rule, which turns ROP on, takes precedence. So the answer is C, ROP is on for winword.exe.