What type of software vulnerability allows attackers to inject malicious client-side scripts into web pages viewed by other users, bypassing browser security controls? MCQ with Answer and Explanation
What type of software vulnerability allows attackers to inject malicious client-side scripts into web pages viewed by other users, bypassing browser security controls?
A. SQL Injection
B. Zero-Day Exploit
C. Buffer Overflow
D. Cross-Site Scripting (XSS)
Answer: Option D
Solution (By JKExamLibrary)
XSS vulnerabilities occur when web applications include unvalidated data in web outputs, allowing threat actors to inject malicious scripts into a victim's browser session.
Explanation:
A security analyst is responsible for monitoring, analyzing, and responding to security threats and incidents to protect an organization's information assets.
Which software utility uses cryptographic hashing to verify that a downloaded application patch has not been tampered with or modified by an intermediary threat actor?
Explanation:
Integrity checkers calculate cryptographic hashes (like SHA-256) of files, comparing them to known vendor benchmarks to verify the file hasn't been modified.
Explanation:
Encryption converts readable data (plaintext) into an unreadable format (ciphertext) using an algorithm and key, ensuring that only authorized parties can access the information.
No comments yet. Be the first to start the discussion!