nerdexam
Exams312-50V10Questions#445
EC-Council

312-50V10 · Question #445

312-50V10 Question #445: Real Exam Question with Answer & Explanation

The correct answer is A: Attempts by attackers to access Web sites that trust the Web browser user by stealing the user's. Cookies can store passwords and form content a user has previously entered, such as a credit card number or an address. Cookies can be stolen using a technique called cross-site scripting. This occurs when an attacker takes advantage of a website that allows its users to post unf

Question

A company's security policy states that all Web browsers must automatically delete their HTTP browser cookies upon terminating. What sort of security breach is this policy attempting to mitigate?

Options

  • AAttempts by attackers to access Web sites that trust the Web browser user by stealing the user's
  • BAttempts by attackers to access the user and password information stored in the company's SQL
  • CAttempts by attackers to access passwords stored on the user's computer without the user's
  • DAttempts by attackers to determine the user's Web browser usage patterns, including when sites

Explanation

Cookies can store passwords and form content a user has previously entered, such as a credit card number or an address. Cookies can be stolen using a technique called cross-site scripting. This occurs when an attacker takes advantage of a website that allows its users to post unfiltered HTML and JavaScript https://en.wikipedia.org/wiki/HTTP_cookie#Cross-site_scripting_.E2.80.93_cookie_theft

Community Discussion

No community discussion yet for this question.

Full 312-50V10 Practice