A security architect is reviewing the code for a company's financial website. The architect suggests adding the following HTML element, along with a server-side function, to generate a random number on the page used to initiate a funds transfer: Which of the following attacks is the security architect attempting to prevent? A) SQL injection B) XSRF C) XSS D) Clickjacking

Question

A security architect is reviewing the code for a company's financial website. The architect suggests adding the following HTML element, along with a server-side function, to generate a random number on the page used to initiate a funds transfer: <input type="hidden" name="token" value=generateRandomNumber()> Which of the following attacks is the security architect attempting to prevent?
A) SQL injection
B) XSRF
C) XSS
D) Clickjacking

Quizplus · Accepted Answer

The security architect is attempting to prevent Cross-Site Request Forgery (XSRF) by using a token to ensure that the request to initiate a funds transfer is legitimate and not forged by an attacker.

A Security Architect Is Reviewing the Code for a Company's