nerdexam
Cisco

200-201 · Question #104

Refer to the exhibit. Which kind of attack method is depicted in this string?

The correct answer is A. cross-site scripting. The depicted string, which likely contains embedded script tags within user input, represents a Cross-Site Scripting (XSS) attack.

Submitted by akirajp· Mar 6, 2026Network Intrusion Analysis

Question

Refer to the exhibit. Which kind of attack method is depicted in this string?

Options

  • Across-site scripting
  • Bman-in-the-middle
  • CSQL injection
  • Ddenial of service

How the community answered

(37 responses)
  • A
    89% (33)
  • B
    3% (1)
  • C
    3% (1)
  • D
    5% (2)

Why each option

The depicted string, which likely contains embedded script tags within user input, represents a Cross-Site Scripting (XSS) attack.

Across-site scriptingCorrect

Cross-Site Scripting (XSS) attacks involve injecting malicious scripts, typically JavaScript within `<script>` tags, into legitimate web pages. When other users view these compromised pages, the malicious script executes in their browser, allowing attackers to steal session cookies, deface websites, or redirect users.

Bman-in-the-middle

A man-in-the-middle (MITM) attack involves an attacker intercepting communication between two parties, not typically by injecting scripts into a URL or input field.

CSQL injection

SQL injection involves injecting malicious SQL queries into database input fields to manipulate or extract data from the database, not client-side scripts for browser execution.

Ddenial of service

Denial-of-service (DoS) attacks aim to make a service unavailable to its legitimate users, typically through overwhelming the system with traffic, not by injecting scripts into a web application.

Concept tested: Cross-Site Scripting (XSS) attack detection

Source: https://owasp.org/www-community/attacks/xss/

Topics

#cross-site scripting#web application attacks#attack signatures

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice