A Security Analyst Is Reviewing a Web Application

question 33

Multiple Choice

A security analyst is reviewing a web application. If an unauthenticated user tries to access a page in the application, the user is redirected to the login page. After successful authentication, the user is then redirected back to the original page. Some users have reported receiving phishing emails with a link that takes them to the application login page but then redirects to a fake login page after successful authentication. Which of the following will remediate this software vulnerability?

• A) Enforce unique session IDs for the application.
• B) Deploy a WAF in front of the web application.
• C) Check for and enforce the proper domain for the redirect.
• D) Use a parameterized query to check the credentials.
• E) Implement email filtering with anti-phishing protection.

---

Definitions:

General Adaptation Syndrome

A three-stage process that describes the physiological changes the body goes through when under stress: alarm, resistance, and exhaustion.

Alarm Reaction

The first stage of the GAS, which is triggered by the impact of a stressor and characterized by sympathetic activity.

Exhaustion Stage

The final phase of the stress response, as described by Hans Selye, characterized by depleted physical and mental resources, leading to burnout or health issues.

Resistance Stage

The second phase of the General Adaptation Syndrome, where the body mobilizes its defenses to cope with a stressor.