312-50V13 · Question #551
Identify the web application attack where the attackers exploit vulnerabilities in dynamically generated web pages to inject client-side script into web pages viewed by other users.
The correct answer is B. Cross-Site Scripting (XSS). Cross-Site Scripting (XSS) is a web application attack where attackers inject malicious client-side scripts into web pages, which are then executed in the browsers of other unsuspecting users.
Question
Options
- ASQL injection attack
- BCross-Site Scripting (XSS)
- CLDAP Injection attack
- DCross-Site Request Forgery (CSRF)
How the community answered
(49 responses)- A2% (1)
- B92% (45)
- C4% (2)
- D2% (1)
Why each option
Cross-Site Scripting (XSS) is a web application attack where attackers inject malicious client-side scripts into web pages, which are then executed in the browsers of other unsuspecting users.
SQL injection attacks target databases by inserting malicious SQL code into input fields to manipulate or extract data.
Cross-Site Scripting (XSS) attacks specifically involve injecting malicious client-side scripts (often JavaScript) into legitimate web pages, which are then delivered to and executed by other users' web browsers, enabling various malicious activities.
LDAP Injection attacks involve manipulating LDAP statements to query or modify LDAP directory services.
Cross-Site Request Forgery (CSRF) attacks trick authenticated users into unwittingly executing unwanted actions on a web application by forging requests.
Concept tested: Cross-Site Scripting (XSS) attack
Source: https://learn.microsoft.com/en-us/azure/security/fundamentals/xss-vulnerabilities
Topics
Community Discussion
No community discussion yet for this question.