Which of the following technologies is a target of XSS or CSS (Cross-Site Scripting) attacks?

The correct answer is A. Web Applications. Web Applications (A) are the target of XSS attacks because XSS exploits the trust a user's browser places in a website - attackers inject malicious scripts into web pages that are then executed in victims' browsers, stealing cookies, session tokens, or redirecting users. Intrusio

Submitted by carter_n· Apr 18, 2026Systems and Application Security

Question

Which of the following technologies is a target of XSS or CSS (Cross-Site Scripting) attacks?

Options

AWeb Applications
BIntrusion Detection Systems
CFirewalls
DDNS Servers

How the community answered

(33 responses)

A
88% (29)
B
3% (1)
C
6% (2)
D
3% (1)

Explanation

Web Applications (A) are the target of XSS attacks because XSS exploits the trust a user's browser places in a website - attackers inject malicious scripts into web pages that are then executed in victims' browsers, stealing cookies, session tokens, or redirecting users.

Intrusion Detection Systems (B), Firewalls (C), and DNS Servers (D) are not XSS targets because XSS is a client-side injection attack that operates within the HTTP/HTML layer of web applications - IDS and firewalls are network-layer defenses, and DNS handles domain name resolution, none of which involve rendering user-supplied content in a browser context.

Memory tip: XSS = "Xecutes Scripts on a Site" - if it's not a site (web application) serving content to a browser, it's not an XSS target.

Topics

#Cross-Site Scripting (XSS)#Web Application Security#Vulnerabilities#Client-Side Attacks

Community Discussion

No community discussion yet for this question.

Full SSCP Practice