MCQ: How can attackers exploit the lack of security training and awareness at the architectural level to launch XSS and CSRF attacks?

• A. The lack of security training and awareness has no impact on security
• B. By intercepting and modifying secure training programs
• C. By exploiting the lack of developer awareness about secure coding practices, allowing attackers to introduce vulnerabilities and launch attacks
• D. Compressed application code automatically ensures security without considering training and awareness