Cisco 200-901 Exam With Confidence Using Practice Dumps

The script returns a 401 Unauthorized response, indicating that the request lacks proper authentication. To resolve this, you must include an Authorization header in the HTTP GET request. The value of this header should be the Base64 encoded string of the username and password in the format username:password. This is necessary to authenticate the request and receive a 200 OK response.

References:

Cisco DevNet Associate Study Guide: REST API Authentication Methods (Chapter 7, Section: HTTP Basic Authentication).

CSRF (Cross-Site Request Forgery) is an attack that forces an end user to execute unwanted actions on a web application in which they are currently authenticated. It exploits the trust that a web application has in the user's browser.

Authenticated Session Exploit: CSRF takes advantage of the fact that the user is already authenticated, making the attack appear legitimate.

Unwanted Actions: The attacker tricks the user into performing actions without their knowledge.

Option D is correct as CSRF is the OWASP threat that exploits authenticated sessions to execute attacks.

Injection attacks occur when untrusted data is sent to an interpreter as part of a command or query. The attacker's hostile data can trick the interpreter into executing unintended commands or accessing data without proper authorization. Common types of injection attacks include SQL injection, command injection, and LDAP injection. These types of attacks exploit vulnerabilities in how an application processes input data, allowing attackers to inject malicious commands or queries into the system.