Multiple Choice
A security analyst is reviewing a web application. If an unauthenticated user tries to access a page in the application, the user is redirected to the login page. After successful authentication, the user is then redirected back to the original page. Some users have reported receiving phishing emails with a link that takes them to the application login page but then redirects to a fake login page after successful authentication. Which of the following will remediate this software vulnerability?
A) Enforce unique session IDs for the application.
B) Deploy a WAF in front of the web application.
C) Check for and enforce the proper domain for the redirect.
D) Use a parameterized query to check the credentials.
E) Implement email filtering with anti-phishing protection.
Correct Answer:
Verified
Correct Answer:
Verified
Q28: During a review of vulnerability scan results,
Q29: Which of the following sources would a
Q30: An information security analyst on a threat-hunting
Q31: A pharmaceutical company's marketing team wants to
Q32: An analyst is working with a network
Q34: A security analyst is scanning the network
Q35: Which of the following would MOST likely
Q36: A hybrid control is one that:<br>A) is
Q37: Which of the following sets of attributes
Q38: A security analyst is reviewing the following