A Security Analyst Is Reviewing a Web Application

question 33

Multiple Choice

A security analyst is reviewing a web application. If an unauthenticated user tries to access a page in the application, the user is redirected to the login page. After successful authentication, the user is then redirected back to the original page. Some users have reported receiving phishing emails with a link that takes them to the application login page but then redirects to a fake login page after successful authentication. Which of the following will remediate this software vulnerability?

• A) Enforce unique session IDs for the application.
• B) Deploy a WAF in front of the web application.
• C) Check for and enforce the proper domain for the redirect.
• D) Use a parameterized query to check the credentials.
• E) Implement email filtering with anti-phishing protection.

---

Definitions:

War Against Sin

An expression often used to describe campaigns or movements aimed at addressing moral decadence or perceived moral issues in society.

Comprehensive Crime Control Act

A significant piece of legislation enacted in 1984 in the United States aiming at reforming the criminal justice system and expanding federal laws on crime.

Federal Death Penalty

Capital punishment imposed by the federal government of a country for certain crimes, as opposed to state-level capital punishment laws.

Election Of 1980

A significant United States presidential election wherein Republican Ronald Reagan defeated incumbent Democratic President Jimmy Carter, marking a conservative shift in American politics.