MENU
Which of the following are the limitations for the cross site request forgery (CSRF) attack?
Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: D
Get Premium GSNA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
In Unix, the /etc/securetty file is used to identify the secure terminals from where the root can be allowed to log in.
Answer B is incorrect. In Unix, the /etc/ioports file shows which I/O ports are in use at the moment.
Answer A is incorrect. In Unix, the /etc/services file is the configuration file that lists the network services that the system supports.
Answer C is incorrect. In Unix, the /proc/interrupts file is the configuration file that shows the interrupts in use and how many of each
there has been.
32 comments · newest first
LE
Lea
9 months ago
Wait, are people still not checking referrer headers? That's shocking!
VI
Vilma
10 months ago
D makes sense, but isn't it a bit outdated?
WI
Winfred
10 months ago
Totally agree with B, referrer checks are crucial!
LO
Lou
10 months ago
C is interesting, but I think it's more about session management.
SH
Shaun
10 months ago
A is definitely a limitation, attackers need the right values.
FL
Flo
11 months ago
I recall that using GET and POST parameters for authentication is a bad practice, but I can't remember if that directly relates to CSRF limitations.
RA
Raina
11 months ago
I practiced a question similar to this, and I feel like limiting authentication cookies could help mitigate CSRF, but I'm not entirely sure if that's a limitation.
LU
Luther
11 months ago
I think option B makes sense because if a site checks the referrer header, it can block CSRF attacks.
MA
Mammie
11 months ago
I remember that CSRF attacks rely on the user's session, but I'm not sure if the attacker needs to know all the form inputs.
LY
Lynna
11 months ago
This CSRF question seems straightforward. The limitations are about the attacker's ability to manipulate the request and the target site's defenses. I'm feeling confident I can nail this one.
RO
Rozella
12 months ago
Alright, I think I've got a handle on this. The limitations have to do with the attacker's ability to control the form inputs and the target site's security measures. Time to select the right answers.
KE
Kenneth
12 months ago
I'm a bit confused on this one. I know CSRF is about forging requests, but I'm not sure exactly what the limitations are. Guess I'll have to think it through.
LE
Leonida
12 months ago
Okay, let's see. I know CSRF attacks try to trick the user into performing actions they didn't intend. The key is figuring out what the limitations are.
LE
Lera
1 year ago
Hmm, this CSRF question looks tricky. I'll need to think carefully about the different limitations that can apply.
HA
Hailey
1 year ago
All these options sound like a lot of work for the attacker. Guess they gotta be real determined to pull off a CSRF attack these days.
ME
Merilyn
1 year ago
Agreed, it adds an extra layer of security for the target site.
KR
Kristel
1 year ago
I think having limited lifetime authentication cookies is a good defense against CSRF.
MA
Man
1 year ago
Definitely, the attacker needs to put in a lot of effort to make it work.
MA
Madelyn
1 year ago
Yeah, it's not easy to pull off a CSRF attack with all those limitations.
AR
Arlette
1 year ago
Authenticating in GET and POST parameters, not just cookies? That's a sneaky one. Guess they're trying to make it harder for the hackers to spoof the requests.
WE
Weldon
1 year ago
Limited lifetime authentication cookies? That's gotta be a good way to protect against CSRF. Keeps the bad guys on their toes.
PE
Peggie
1 year ago
C) The target site should have limited lifetime authentication cookies.
CO
Corazon
1 year ago
B) The attacker must target a site that doesn't check the referrer header.
DO
Dortha
1 year ago
A) The attacker must determine the right values for all the form inputs.
SH
Sharen
1 year ago
Targeting a site that doesn't check the referrer header? Sounds like a shot in the dark, but maybe it's a common vulnerability.
ON
Ona
1 year ago
The attacker needs to determine all the form inputs? That's a tough one. I guess they need to be a real master of reverse engineering or something.
TR
Tresa
1 year ago
C) The target site should have limited lifetime authentication cookies.
CA
Candida
1 year ago
B) The attacker must target a site that doesn't check the referrer header.
SA
Sabine
1 year ago
A) The attacker must determine the right values for all the form inputs.
JO
Joanna
2 years ago
I believe D is also a limitation. The target site should authenticate in GET and POST parameters, not just cookies.
JE
Jeffrey
2 years ago
I agree with Lajuana. The attacker needs to know the form inputs and the target site should have limited lifetime authentication cookies.
LA
Lajuana
2 years ago
I think the limitations for CSRF attack include A and C.