CyberCertPrepSecurity FundamentalsWeb Security BasicsEASYFree question
What is Cross-Site Scripting (XSS)?
- A.A method of copying a website's design
- B.An attack where malicious scripts are injected into trusted websites and executed in other users' browsers
- C.A technique for cross-referencing security scripts
- D.A tool for testing website performance across browsers
Why B is correct
XSS attacks inject malicious JavaScript code into web pages viewed by other users. When a victim's browser loads the page, it executes the attacker's script, which can steal session cookies, redirect users, capture keystrokes, or modify the page content. XSS exploits the trust a user has in a website.
Know someone studying for Security Fundamentals? Send them this one.