ITPEC FE Morning April 2020 Question 37
ITPEC FE Morning April 2020 — Question 37 of 80
Clickjacking — tricking users into clicking hidden UI elements.
The attacker overlays a transparent iframe on top of a legitimate page. The user believes they are clicking a visible button, but actually interacts with a hidden element performing an unintended action (e.g., granting permissions, deleting data).
Why not others:
- (a) Remote mouse control — not a real named attack category
- (c) Locking the mouse pointer — not a real attack technique
- (d) Removing a mouse driver — not a real attack technique
Key rule: Clickjacking = invisible layer tricks user into unintended clicks. Defense: X-Frame-Options header or Content-Security-Policy: frame-ancestors.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.