What is a capability of cross-site scripting?

The correct answer is C. steals cookies used to obtain access as an authenticated user to a cloud service. Cross-site scripting (XSS) is a type of security vulnerability that allows attackers to inject malicious scripts into web pages viewed by users. Once the script is executed in the victim's browser, it can steal session cookies, enabling the attacker to impersonate an…

Submitted by daniela_cl· Mar 30, 2026Cloud Security

Question

Options

Aintercepts traffic to take over a connection to a cloud-based service
Bsupplies valid credentials by hijacking DNS queries sent by the user device
Csteals cookies used to obtain access as an authenticated user to a cloud service
Dexploits vulnerable applications for attackers to pass commands to a database

How the community answered

(27 responses)

B
4% (1)
C
93% (25)
D
4% (1)

Explanation

Cross-site scripting (XSS) is a type of security vulnerability that allows attackers to inject malicious scripts into web pages viewed by users. Once the script is executed in the victim's browser, it can steal session cookies, enabling the attacker to impersonate an authenticated user and gain unauthorized access to a web service or application.

Topics

#Cross-site scripting#XSS#Web application attacks#Session hijacking

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice