VAPT

Which of the following best describes a client-side vulnerability?

• Flaw in server configuration

• Weakness in user-side applications like browsers or plugins

• Misconfigured firewall rules

• Database injection flaw

Cross-Site Scripting (XSS) is primarily a type of:

• Server-side vulnerability

• Client-side vulnerability

• Network-level vulnerability

• Authentication issue

Which client-side technology is most often targeted for injection attacks?

• HTML

• CSS

• JavaScript

• XML

Drive-by download attacks occur when:

• A user downloads a file intentionally

• Malware is automatically downloaded when visiting a webpage

• A firewall is disabled by the user

• A web server hosts malicious files

Which of the following is a major cause of client-side vulnerabilities?

• Outdated software and plugins

• Strong encryption algorithms

• Sandboxing browsers

• Code signing verification

What is the main role of a browser sandbox?

• To improve page rendering

• To isolate browser processes and reduce exploit impact

• To store cookies securely

• To manage browser extensions

Which of the following can exploit client-side vulnerabilities?

• Email attachments

• Malicious web pages

• Infected USB drives

• All of the above

The Document Object Model (DOM) is often manipulated during which type of attack?

• SQL Injection

• DOM-based XSS

• CSRF

• Directory Traversal

The best defense against client-side vulnerabilities includes:

• Frequent OS reinstalls

• Regular patching and sandboxing

• Removing antivirus

• Using outdated browsers

Which protocol is commonly exploited in client-side attacks?

• FTP

• HTTP

• DNS

• SSH