Cyber Security Quiz
10 questions · no time limit
0:00
IDENTITY AND ACCESS MANAGEMENT
Question 1 of 10
No time limit
Current
Answered
Flagged
Not seen
PASSAGE
An application authenticates users with a cookie configured as Secure, HttpOnly, and SameSite=Lax. An attacker hosts a page that automatically submits a cross-site POST request to the application's funds-transfer endpoint. The endpoint relies only on the authentication cookie and does not use a separate anti-CSRF token.
Which outcome is most likely in a modern browser using the stated cookie configuration?
YOUR PROGRESS
10
QUESTIONS
Ready when you are
Answer in any order. Your progress shows here as you go.
QUESTIONS
KEYBOARD
Pick an answer ABCD
Next question ↵→
Previous ←
Flag for review F