032_Cross-site Scripting – CompTIA Security+ SY0-701 – 2.3

Front

What does XSS stand for in cybersecurity?

Back

Cross-Site Scripting

Front

What does XSS stand for in cybersecurity?

Back

Cross-Site Scripting

Front

Why is XSS abbreviated as XSS instead of CSS?

Back

To avoid confusion with Cascading Style Sheets

Front

What language is typically used in XSS attacks?

Back

JavaScript

Front

What language is typically used in XSS attacks?

Back

JavaScript

Front

Which of the following is a goal of an XSS attack?
Options:
Steal cookies and session tokens,
Delete server files,
Install rootkits,
Change DNS settings,
Shutdown the system

Back

Steal cookies and session tokens

Front

What does a victim typically do to trigger an XSS attack?

Back

Click on a malicious link

Front

Where does the malicious script run in an XSS attack?

Back

In the victim's browser

Front

What type of XSS stores the script on the server?

Back

Persistent (Stored) XSS

Front

What type of XSS requires the user to interact with a link?

Back

Non-Persistent (Reflected) XSS