Which of the following risks can be mitigated by HTTP headers?

The correct answer is B. XSS. HTTP headers can be used to mitigate risks associated with Cross-Site Scripting (XSS). Security- related HTTP headers such as Content Security Policy (CSP) and X-XSS-Protection can be configured to prevent the execution of malicious scripts in the context of a web page. XSS…

Submitted by katya_ua· Mar 6, 2026Threats, vulnerabilities, and mitigations

Question

Options

ASQLi
BXSS
CDoS
DSSL

How the community answered

(41 responses)

B
93% (38)
C
2% (1)
D
5% (2)

Explanation

HTTP headers can be used to mitigate risks associated with Cross-Site Scripting (XSS). Security- related HTTP headers such as Content Security Policy (CSP) and X-XSS-Protection can be configured to prevent the execution of malicious scripts in the context of a web page. XSS (Cross-Site Scripting): A vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users. HTTP headers like CSP help prevent XSS attacks by specifying which dynamic resources are allowed to load. SQLi (SQL Injection): Typically mitigated by using parameterized queries and input validation, not DoS (Denial of Service): Mitigated by network and application-level defenses rather than HTTP SSL (Secure Sockets Layer): Refers to securing communications and is not directly mitigated by HTTP headers; rather, it's implemented using SSL/TLS protocols.

Community Discussion

No community discussion yet for this question.

Full SY0-701 Practice