Question

Which of the following is not a threat of web application?

(a) Session poisoning

(b) Phishing

(c) Cryptographic interception

(d) Cookie snooping

I got this question in class test.

Asked question is from Attack Vectors topic in section Understanding Attack Vectors of Cyber Security

Answer 1

The correct answer is:

(b) Phishing

Phishing is primarily a social engineering attack where attackers trick individuals into revealing sensitive information, often through deceptive emails or websites. While it can target web applications indirectly, it is not specifically a threat to web applications themselves. The other options — session poisoning, cryptographic interception, and cookie snooping — are direct threats to web applications and their security.