Adobe Exam AD0-E709 Topic 6 Question 15 Discussion

Actual exam question for Adobe's AD0-E709 exam

Question #: 15
Topic #: 6

Which two techniques can be used to protect a storefront POST action against Cross Site Request Forgery (CSRF) attacks? (Choose two.)

AThe form sending data to that action needs to include a fornjtey parameter with a valid form key and the action must instantiate \Manento\Framwork\Data\ForumKey\Formkey\Validator validate it.

BThe action needs to implement \Mgento\Framework\App\CSrfAwareActioninterface and include the validateForCsrf method implementing the actual protection logic.

CThe form sending data to that action needs to include a form_key parameter with a valid form key which will automatically be used in a built-in CSRF validation.

DThe action needs to implement \Magento\Framework\App\ActionvHttpPosTActioninterface to trigger built-in CSRF validation.

Show Suggested Answer

Suggested Answer: B, D

by Kris at Nov 16, 2022, 10:16 PM

Limited Time Offer

25%

Off

Get Premium AD0-E709 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!