Free CompTIA Security+ SY0-701 Practice Question

Cross-site Request Forgery (CSRF) vulnerabilities allow unauthorized commands to be transmitted from a user that the application trusts. The use of anti-CSRF tokens is the best mitigation technique because it ensures that the web application validates the user's intended actions by matching the token with the one it issued, therefore preventing CSRF attacks. Using input validation may prevent other types of attacks such as SQL Injection or XSS, but not CSRF. Implementing a content security policy can help mitigate XSS and clickjacking attacks, but not CSRF specifically. While parameterized queries are used to prevent SQL Injection, they do not protect against CSRF.