Quiz on Cross-Site Scripting (XSS) Attacks

What does XSS stand for?

• Cross-Site Session

• Cross-Site Scripting

• Cross-Site Security

• Cross-Site Software

Which type of XSS attack involves the malicious script being stored on the server?

• DOM-based XSS

• Stored XSS

• Phishing XSS

• Reflected XSS

What is a common consequence of a Stored XSS attack?

• Immediate redirection to a safe site

• Theft of sensitive data

• Increased user engagement

• Improved website performance

How does a Reflected XSS attack typically work?

• The script is stored on the server

• The user is redirected to a secure page

• The attacker crafts a URL with a malicious script

• The script is executed on the server

Which of the following is a prevention technique for XSS attacks?

• Allowing all scripts to run

• Using weak passwords

• Input validation and sanitization

• Ignoring user input

What is the primary goal of an attacker using XSS?

• To enhance user experience

• To steal user credentials or data

• To increase website traffic

• To improve website functionality

In DOM-based XSS, what does the attacker manipulate?

• Server-side scripts

• Client-side behavior of the web page

• Database records

• Network protocols

What is one way to prevent session hijacking through XSS?

• Allow all scripts to execute

• Use HttpOnly and Secure flags for cookies

• Store cookies in plain text

• Disable session expiration

Which of the following is NOT a characteristic of Reflected XSS?

• The script is delivered via a crafted link

• The script is stored on the server

• The server reflects user input into the page

• The attack only works when a user clicks the malicious URL

What is a recommended practice for encoding user-generated content?

• Display it without any changes

• Encode and sanitize before displaying

• Allow all HTML tags

• Ignore user input completely