Q5 /20 Which is the description of CSRF (Cross-Site Request Forgery)?

CSRF is an attack where a malicious actor tricks a user into performing unintended actions on a website where they are authenticated, typically by embedding malicious scripts or requests that execute in the victim's browser without their knowledge. Option D correctly describes this—a user visits a compromised page containing malicious scripts that perform actions on other sites. Options A, B, and C describe different attack types: A describes a DDoS via DBMS exploitation, B describes XSS (stored/reflected), and C describes SQL injection, respectively.

Step-by-step Derivation:
CSRF (Cross-Site Request Forgery) mechanics: (1) Attacker embeds malicious request on a website or email; (2) Victim visits the page while authenticated to a target site; (3) Victim's browser automatically sends authenticated request to target site without user's knowledge; (4) Target site processes request as if victim authorized it. Option D captures this by mentioning malicious scripts embedded in web pages that run unintended operations on visitors' browsers. Options A (DDoS via DBMS), B (XSS from input forms), and C (SQL injection) are distinct web security vulnerabilities, not CSRF.