Question: In a scenario where an attacker uses CSRF to access a victim's bank account, what information does the attacker need to know about the victim?

Answer:

In a scenario where an attacker uses CSRF to access a victim's bank account, the attacker needs to know details about the victim's active session and how requests are authenticated.

MCQ: In a scenario where an attacker uses CSRF to access a victim's bank account, what information does the attacker need to know about the victim?

A. The victim's home address.
B. The victim's login credentials.
C. Details about the victim's active session and how requests are authenticated.
D. CSRF attacks do not require any information about the victim.

Correct Answer: A. The victim's home address.

Explanation:

In a scenario where an attacker uses CSRF to access a victim's bank account, the attacker needs to know details about the victim's active session and how requests are authenticated.