Cyber Security Quiz
10 questions · no time limit
0:00
APPLICATION AND WEB SECURITY
Question 1 of 10
No time limit
Current
Answered
Flagged
Not seen
PASSAGE
A site stores its session identifier in a cookie configured with Secure, HttpOnly, and SameSite=Lax. The endpoint /account/email/change?value=new@example.net changes the authenticated user's email address in response to a GET request. An attacker places a link to that endpoint on another site.
Which change most appropriately addresses the remaining session-related request-forgery risk while preserving normal authenticated navigation?
YOUR PROGRESS
10
QUESTIONS
Ready when you are
Answer in any order. Your progress shows here as you go.
QUESTIONS
KEYBOARD
Pick an answer ABCD
Next question ↵→
Previous ←
Flag for review F