Information Security Officer Interview Question:

Explain how does one defend against CSRF?

Submitted by: Administrator

Nonces required by the server for each page or each request is an accepted, albeit not foolproof, method. Again, we're looking for recognition and basic understanding here–not a full, expert level dissertation on the subject. Adjust expectations according to the position you're hiring for.
Submitted by: Administrator