Threats & AttacksPregunta 20 de 100
A malicious script stored on a vulnerable web page runs in other users' browsers when they view it. This is:
a.SQL injection
b.CSRF
c.Stored cross-site scripting
d.Clickjacking
Explicación
Stored cross-site scripting (XSS) persists malicious script on the server so it executes in every visitor's browser. It can steal session tokens or perform actions as the victim. Output encoding and input validation prevent XSS.
Practica las 100 preguntas gratis — sin registro.
Preguntas relacionadas de este tema
- Which type of malware hides deep in the operating system to conceal its presence and maintain privileged access?
- A phishing attack that specifically targets a high-value executive is known as:
- Which attack intercepts and possibly alters communication between two parties who believe they are talking directly?
- Which term describes exploiting a time gap between checking a resource and using it?
- An attacker follows an employee through a secured door without badging in. This physical attack is called:
- Which attack precomputes hashes to reverse password hashes quickly?
Última revisión: · proceso editorial
Equipo Editorial de PrepPass · Verificado con CompTIA Security+ (SY0-701) · Cómo revisamos