Meta Interview Question

What are the defenses against a CSRF attack?