A recent security assessment revealed a web application may be vulnerable to clickjacking. According to the application developers, a fix may be months away. Which of the following should a security engineer configure on the web server to help mitigate the issue?
A) File upload size limits
B) HttpOnly cookie field
C) X-Frame-Options header
D) Input validation

Question

Quizplus · Accepted Answer

The X-Frame-Options header can be configured on the web server to prevent the web application from being embedded in an iframe, which is a common method used in clickjacking attacks.

A Recent Security Assessment Revealed a Web Application May Be