While logged into the payroll system, an officer opens a malicious web page that silently submits a form to the payroll system to change a bank account. The system accepts it because the officer's session is active. Which defence stops this?

Alors qu'il est connecté au système de paie, un agent ouvre une page web malveillante qui soumet discrètement un formulaire au système de paie pour modifier un compte bancaire. Le système l'accepte parce que la session de l'agent est active. Quelle défense l'arrête ?

Answers

AA unique anti-CSRF token in every genuine formUn jeton anti-CSRF unique dans chaque vrai formulaire

BMuch longer session timeouts for every userDes sessions beaucoup plus longues pour chaque utilisateur

CLetting the form be submitted by GET as wellAutoriser aussi la soumission du formulaire par GET

DSwitching the payroll system off HTTPSFaire passer le système de paie hors de HTTPS

The answer and explanation are in the full bank.

This question is one of 2,831 in the paid banks. Each comes with the correct answer and the reasoning behind it, not just a mark.

Unlock for 5,000 RWF

MIFOTRA exam practicealigned to Practice set: Cybersecurity·3 marks·Hard

While logged into the payroll system, an officer opens a malicious web page that silently submits a form to the payroll system to change a bank account. The system accepts it because the officer's session is active. Which defence stops this?

More Cybersecurity questions