Cyber Security Quiz
10 questions · no time limit
0:00
APPLICATION AND WEB SECURITY
Question 1 of 10
No time limit
Current
Answered
Flagged
Not seen
PASSAGE
A banking site uses an authentication cookie configured as
SameSite=Lax. The endpoint GET /profile/change-email?value=new@example.test changes the signed-in user's email address and requires no anti-CSRF token. In the target browsers, Lax cookies are included with top-level cross-site GET navigations. An attacker places a link to that endpoint on another site and persuades a signed-in user to follow it.Which assessment is most accurate?
YOUR PROGRESS
10
QUESTIONS
Ready when you are
Answer in any order. Your progress shows here as you go.
QUESTIONS
KEYBOARD
Pick an answer ABCD
Next question ↵→
Previous ←
Flag for review F
Answers save as you go · flagged questions come back at the end