032_Cross-site Scripting – CompTIA Security+ SY0-701 – 2.3

What does XSS stand for in cybersecurity?

• Cross-Site Scripting

• Cross-Site Security

• Cross-Site Session

• Cross-Site Shielding

What vulnerability is exploited in a Cross-Site Scripting attack?

• Unexpected Action

• SQL Injection

• Buffer Overflow

• Cross-Site Request Forgery

Answer explanation

The vulnerability exploited in a Cross-Site Scripting attack is an Unexpected Action.

What should users avoid clicking to prevent XSS?

• Untrusted links

• Trusted links

• Secure websites

• Email attachments

What does XSS stand for in cybersecurity?

• Cross-Site Scripting

• Cross-Site Security

• Cross-Site Session

• Cross-Site Shielding

What language is typically used in XSS attacks?

• JavaScript

• Python

• Java

• C++

What should developers validate to prevent XSS?

• Only inputs from trusted sources

• All user inputs

• Only inputs from forms

• Only inputs from URLs

What should users avoid clicking to prevent XSS?

• Untrusted links

• Trusted links

• Secure websites

• Email attachments

What type of XSS requires the user to interact with a link?

• Persistent (Stored) XSS

• Non-Persistent (Reflected) XSS

• DOM-based XSS

• Cross-Site Request Forgery (CSRF)

Where are persistent XSS attacks commonly found?

• Social media comment sections

• Online banking websites

• Corporate email servers

• Local file storage systems

What is one common input field vulnerable to XSS?

• Search fields

• Email fields

• Password fields

• Date fields