While reviewing logs, a web developer notices the following user input string in a field: Which of the following types of attacks was done to the website?

The correct answer is A. XSS injection. The correct answer is A, XSS injection (Cross-Site Scripting injection). XSS injection is the broad, general category of attack where an attacker injects malicious scripts (typically JavaScript) into input fields of a web application. The other options describe specific…

Attacks and exploits

Question

While reviewing logs, a web developer notices the following user input string in a field:

Which of the following types of attacks was done to the website?

Options

AXSS injection
BBlind XSS
CReflected XSS
DPersistent XSS

How the community answered

(29 responses)

A
86% (25)
B
7% (2)
C
3% (1)
D
3% (1)

Explanation

The correct answer is A, XSS injection (Cross-Site Scripting injection). XSS injection is the broad, general category of attack where an attacker injects malicious scripts (typically JavaScript) into input fields of a web application. The other options describe specific subtypes: Reflected XSS (C) is a non-persistent form where the malicious script is reflected off the server in an immediate response; Persistent XSS (D), also called Stored XSS, saves the payload in a database for later execution; and Blind XSS (B) is a variant of Persistent XSS where the attacker cannot see the result directly. Since the question asks what general type of attack occurred based on spotting a suspicious script-like string in an input field, the broadest and most accurate classification is simply XSS injection.

Topics

#XSS#input validation#web logs#attack identification

Community Discussion

No community discussion yet for this question.

Full PT0-001 Practice