Question

There are several commonly known types of attacks that are based on malformed
usage of the HTTP protocol. Which of the following are true?
A Clickjacking is a type of attack that can be defended using CSRF
tokens.
B Flood type attacks are intended to influence the service by affecting
HTTP headers.
C Flood type attacks are, in practice, one of the most difficult to
differentiate from valid usage of a service.
D Cross-site scripting attacks can be prevented by not trusting user
input.​

Answer 1

Answer:

There are several commonly known types of attacks that are based on malformed

usage of the HTTP protocol. Which of the following are true?

A Clickjacking is a type of attack that can be defended using CSRF

tokens.

B Flood type attacks are intended to influence the service by affecting

HTTP headers.

C Flood type attacks are, in practice, one of the most difficult to

differentiate from valid usage of a service.

D Cross-site scripting attacks can be prevented by not trusting user

input.

Answer 2

Answer:

Explanation:

AC