Cross Origin Policy Attacks and Mitigation GWEB Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which of the following is a common CORS misconfiguration that can lead to cross-origin attacks?

   • ASetting Access-Control-Allow-Origin to a specific trusted domain
   • BOmitting the Access-Control-Allow-Origin header entirely
   • CReflecting the Origin header without validating it against an allowlist
   • DUsing Access-Control-Allow-Credentials: true with a specific origin
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Why does CORS introduce security implications even though it is designed to relax the same-origin policy?

   • AIt requires servers to trust the Origin header, which can be spoofed by attackers.
   • BIt weakens the same-origin policy by allowing servers to grant access to specific origins, and if misconfigured, it can expose sensitive data to untrusted origins.
   • CIt disables the same-origin policy entirely for any site that uses CORS.
   • DIt allows any website to read sensitive data from any other website without restriction.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following combinations of protocol, host, and port are considered the same origin?

   • Ahttps://example.com and https://sub.example.com
   • Bhttps://example.com and https://example.com:8443
   • Chttps://example.com and http://example.com
   • Dhttps://example.com/app and https://example.com/app2
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a typical example of a CSRF attack?

   • AAn attacker creates a webpage with a hidden form that automatically submits a transfer request to a bank while the user is logged in.
   • BAn attacker sends an email with a link that, when clicked, changes the user's password on a banking site.
   • CAn attacker uses a brute-force tool to guess the user's password on a login form.
   • DAn attacker injects a script into a forum that steals the user's session cookie.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A web application allows users to upload files and then download them. The application is vulnerable to CSRF on the file upload endpoint. Which mitigation is most effective?

   • ACheck the Content-Type header on the server.
   • BAdd a CSRF token to the upload form and validate it on the server.
   • CRequire the request to be sent as a JSON POST.
   • DSet the SameSite attribute to None on the session cookie.
   Reveal Solution Discussion Select an answer first