nerdexam
EC-Council

EC0-350 · Question #671

Kevin sends an email invite to Chris to visit a forum for security professionals. Chris clicks on the link in the email message and is taken to a web based bulletin board. Unknown to Chris, certain…

The correct answer is C. Cross Site Scripting. See the full explanation below for the reasoning.

Question

Kevin sends an email invite to Chris to visit a forum for security professionals. Chris clicks on the link in the email message and is taken to a web based bulletin board. Unknown to Chris, certain functions are executed on his local system under his privileges, which allow Kevin access to information used on the BBS. However, no executables are downloaded and run on the local system. What would you term this attack?

Options

  • APhishing
  • BDenial of Service
  • CCross Site Scripting
  • DBackdoor installation

How the community answered

(32 responses)
  • A
    9% (3)
  • B
    3% (1)
  • C
    72% (23)
  • D
    16% (5)

Community Discussion

No community discussion yet for this question.

Full EC0-350 Practice