Certified Ethical Hacker CEH · Free Practice Question Medium
Question 98
An attacker waits until a user has an authenticated session with the server he really wants to attack. He then sends a phishing e-mail to the user. When the user opens it and goes to the malicious website, the attacker begins sending messages through the user’s browser session to the target server. Which of the following best describes this attack?
- A CSPP
- B CSRF
- C XSS
- D SQL injection
Reveal correct answer
Correct answer: B
Explanation
Correct Answer:
CSRF is correct.
The question is describing cross-site request forgery (CSRF).
Incorrect Answers:
XSS, CSPP, and SQL injection are incorrect.
The given description does not match the remaining answers.
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
