MENU
Which of the following are the limitations for the cross site request forgery (CSRF) attack?
Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: A, B
Get Premium GSLC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
JE
Jerilyn
11 months ago
Wait, are we really still talking about CSRF? I thought it was old news!
TR
Trinidad
11 months ago
D seems right, but isn't it a bit outdated?
VA
Valene
12 months ago
C is interesting, but I think it's more about session management.
DA
Daisy
12 months ago
Totally agree with B, referrer checks are crucial!
CH
Chantell
12 months ago
A is definitely a limitation, attackers need the right values.
DA
Darrel
1 year ago
I seem to remember a practice question that mentioned option D, about using both GET and POST for authentication, but I'm not confident if that's a limitation for CSRF.
GR
Graciela
1 year ago
I'm not entirely sure about option B; I remember something about referrer headers being important, but I can't recall the specifics.
GL
Glenn
1 year ago
I think option A makes sense because if the attacker doesn't know the right values, they can't craft a successful request.
LA
Laurel
1 year ago
I feel like option C could be a limitation too, since if the cookies have a short lifetime, it would make CSRF less effective.
JO
Jolanda
1 year ago
Hmm, this looks like a tricky one. I'll need to think carefully about the different types of IOCs available in Cortex XDR.
AB
Abel
1 year ago
Hmm, I'm a bit unsure here. The question mentions the "Test Configuration" button, so it could be related to testing the communication with various components. I'll need to think this through carefully.
ST
Stefanie
1 year ago
Hmm, the issue seems to be with the client certificates. I'm thinking option C might be the way to go, but I'll double-check the other choices just to be sure.