Threats & Attacks第 20 / 100 题
A malicious script stored on a vulnerable web page runs in other users' browsers when they view it. This is:
a.SQL injection
b.CSRF
c.Stored cross-site scripting
d.Clickjacking
解析
Stored cross-site scripting (XSS) persists malicious script on the server so it executes in every visitor's browser. It can steal session tokens or perform actions as the victim. Output encoding and input validation prevent XSS.
免费刷完整 100 道题库 — 无需注册。
同考点相关题目
- Which type of malware hides deep in the operating system to conceal its presence and maintain privileged access?
- A phishing attack that specifically targets a high-value executive is known as:
- Which attack intercepts and possibly alters communication between two parties who believe they are talking directly?
- Which term describes exploiting a time gap between checking a resource and using it?
- An attacker follows an employee through a secured door without badging in. This physical attack is called:
- Which attack precomputes hashes to reverse password hashes quickly?