Which attack involves altering protection policies, deleting existing policies, adding new policies, and modifying application data and resources?

Which attack involves altering protection policies, deleting existing policies, adding new policies, and modifying application data and resources?

• A. Cookies
• B. CAPTCHAs
• C. Session Fixation Attack
• D. Security Management Exploits

Answer: (D)

This describes security management exploits—attacks that target the configuration and enforcement of security controls. By changing protection policies, deleting existing ones, adding new policies, and altering application data and resources, an attacker can rewrite access rules and undermine how the system enforces security. Cookies and CAPTCHAs are not about altering how protections are defined or enforced, and a session fixation attack focuses on hijacking session identifiers rather than manipulating policy configurations.

This describes security management exploits—attacks that target the configuration and enforcement of security controls. By changing protection policies, deleting existing ones, adding new policies, and altering application data and resources, an attacker can rewrite access rules and undermine how the system enforces security. Cookies and CAPTCHAs are not about altering how protections are defined or enforced, and a session fixation attack focuses on hijacking session identifiers rather than manipulating policy configurations.