nerdexam
EC-Council

112-52 · Question #141

Which of the following is a web application attack?

The correct answer is A. Cross-Site Scripting (XSS). Cross-Site Scripting (XSS) is a web application attack where malicious scripts are injected into trusted websites and executed in a victim's browser, making it the correct answer. VPN tunneling (B) is a legitimate network security technique for creating encrypted connections, not

Web Application Security

Question

Which of the following is a web application attack?

Options

  • ACross-Site Scripting (XSS)
  • BVPN tunneling
  • CNetwork load balancing
  • DPacket filtering

How the community answered

(38 responses)
  • A
    87% (33)
  • B
    8% (3)
  • C
    3% (1)
  • D
    3% (1)

Explanation

Cross-Site Scripting (XSS) is a web application attack where malicious scripts are injected into trusted websites and executed in a victim's browser, making it the correct answer. VPN tunneling (B) is a legitimate network security technique for creating encrypted connections, not an attack. Network load balancing (C) is an infrastructure method for distributing traffic across servers to improve availability. Packet filtering (D) is a firewall technique that controls network traffic based on rules - a defensive measure, not an attack.

Memory tip: Remember "XSS = eXecuting Sneaky Scripts" - it's always an attack because the attacker injects code into a site you trust. The other three options all describe network infrastructure or defensive tools, not exploits.

Topics

#Cross-Site Scripting (XSS)#Web Application Attacks#Client-Side Security#Web Vulnerabilities

Community Discussion

No community discussion yet for this question.

Full 112-52 Practice