nerdexam
EC-Council

412-79V10 · Question #232

You have carried out the last round of testing for your new website before it goes live. The website has many dynamic pages and connects to a SQL backend that authenticates and retrieves data in a…

The correct answer is B. Your website is vulnerable to XSS. See the full explanation below for the reasoning.

Question

You have carried out the last round of testing for your new website before it goes live. The website has many dynamic pages and connects to a SQL backend that authenticates and retrieves data in a database. You come across a web security site that recommends inputting the following code into a search field on web pages to check for vulnerabilities. code <script> alert ("hacked")</script> When you type this and click on search, you receive a pop-up window that says: hacked What is the result of this test?

Options

  • AYour website is vulnerable to web bugs
  • BYour website is vulnerable to XSS
  • CYour website is not vulnerable
  • DYour website is vulnerable to SQL injection

How the community answered

(24 responses)
  • A
    8% (2)
  • B
    71% (17)
  • C
    4% (1)
  • D
    17% (4)

Community Discussion

No community discussion yet for this question.

Full 412-79V10 Practice