Clickjacking WAHS Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A user reports that after clicking a 'Play Video' button on a streaming site, their social media account posted an unwanted status update. The user did not visit the social media site directly. Which attack technique most likely caused this?

   • ASession fixation, where the attacker sets the user's session ID to a known value
   • BCross-site scripting (XSS), where the attacker injected a script into the streaming site
   • CDNS rebinding, where the attacker's domain resolves to the social media site's IP
   • DClickjacking, where the social media page was loaded in a transparent iframe over the video button
   Reveal Solution Discussion Select an answer first
2. 32expert · medium

   A security team is evaluating tools for clickjacking testing. They need to test a large number of pages across multiple applications and produce a report that can be shared with developers. The team has a budget for one tool and wants to minimize manual effort. Which tool should they choose?

   • AA source code scanner that looks for iframe tags
   • BA command-line scanner that crawls the applications and checks for missing X-Frame-Options and CSP frame-ancestors headers
   • CA browser extension that requires manual navigation to each page
   • DA packet analyzer that captures network traffic
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A user clicks a 'Claim Your Prize' button on a website and later finds that their email account has been configured to forward all messages to an unknown address. The user did not visit the email provider's site. Which attack is the most likely explanation?

   • APhishing, where the user entered their email credentials on a fake site
   • BClickjacking, where the email settings page was loaded in a transparent iframe over the prize button
   • CDNS spoofing, where the user was redirected to a malicious email provider
   • DMalware, where the user's computer was infected by downloading a file
   Reveal Solution Discussion Select an answer first
5. 34application · medium

   A user is on a news website and sees a 'Vote Now' button for a poll. After clicking it, the user notices that their social media account has posted an unwanted status update. The user did not click anything on the social media site. What is the most likely explanation for this?

   • AThe news site used a cross-site request forgery (CSRF) attack to automatically post the status update when the page loaded.
   • BThe news site embedded the social media site's 'Post' button in an invisible iframe and positioned it over the 'Vote Now' button.
   • CThe social media site has a vulnerability that allows any website to post on behalf of a user without interaction.
   • DThe user's browser has a malicious extension that intercepts clicks and performs actions on other sites.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   Which type of tool is commonly used to automate clickjacking testing?

   • AA port scanner like Nmap
   • BA password cracking tool like John the Ripper
   • CA network packet analyzer like Wireshark
   • DA web vulnerability scanner that checks for missing X-Frame-Options or CSP frame-ancestors headers
   Reveal Solution Discussion Select an answer first