032_Cross-site Scripting – CompTIA Security+ SY0-701 – 2.3

What does XSS stand for in cybersecurity?

• Cross-Site Scripting

• Cross Server Scripting

• Cascading Style Sheets

• Xtreme Script Sniffing

• Cross-Site Security

What does XSS stand for in cybersecurity?

Why is XSS abbreviated as XSS instead of CSS?

• To avoid confusion with Cascading Style Sheets

• Because CSS is not secure

• Because XSS is more popular

• To match the JavaScript naming convention

• To avoid confusion with Content Security Settings

What language is typically used in XSS attacks?

• JavaScript

• Python

• HTML

• CSS

• PHP

What language is typically used in XSS attacks?

Which of the following is a goal of an XSS attack?

• Steal cookies and session tokens

• Delete server files

• Install rootkits

• Change DNS settings

• Shutdown the system

What does a victim typically do to trigger an XSS attack?

• Click on a malicious link

• Download a file

• Install an update

• Change their password

• Clear browser cache

Where does the malicious script run in an XSS attack?

• In the victim's browser

• In the server's database

• On the attacker's machine

• In a firewall

• Inside the router

What type of XSS stores the script on the server?

• Persistent (Stored) XSS

• Non-Persistent XSS

• Reflected XSS

• Client-side XSS

• Local XSS

What type of XSS requires the user to interact with a link?

• Non-Persistent (Reflected) XSS

• Persistent (Stored) XSS

• Server-side XSS

• Database XSS

• Static XSS