System Auditor Interview Question:

Tell me how does one defend against CSRF?

Submitted by: Muhammad

Nonces required by the server for each page or each request is an accepted, albeit not foolproof, method. Again, we're looking for recognition and basic understanding here–not a full, expert level dissertation on the subject. Adjust expectations according to the position you're hiring for.
Submitted by: Muhammad