Question

Which of the following is true about web client or server attacks? Choose all that apply.

A. One way to prevent XSS attacks is to disable client side scripts.

B. Banks and financial institutions try to minimize CSRF (Cross-Site Request Forgery) attacks by requiring re-authentication before every security-critical operations such as money transfer or withdrawal.

C. Lack of input validation is the main reason for SQL injection attacks.

D. All the above.

Answer 1

$\color{blue}\underline{Answer:}$

D. All the above.