CompTIA Exam SY0-701 Topic 4 Question 29 Discussion

Actual exam question for CompTIA's SY0-701 exam

Question #: 29
Topic #: 4

Which of the following is a type of vulnerability that involves inserting scripts into web-based applications in order to take control of the client's web browser?

ASQL injection

BCross-site scripting

CZero-day exploit

DOn-path attack

Show Suggested Answer

Suggested Answer: B

Cross-site scripting (XSS) vulnerabilities allow attackers to inject malicious scripts into a website, which are then executed in the user's web browser, potentially leading to data theft or session hijacking.

by Huey at Oct 18, 2024, 11:21 PM

Limited Time Offer

25%

Off

Get Premium SY0-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Mindy

24 days ago

Cross-site scripting, no doubt about it. You inject those nasty scripts and then you're in control of their poor little browser. Classic move!

upvoted 0 times

...

Roxane

1 months ago

Haha, B is the way to go! Cross-site scripting, the good old script-injection trick. Classic way to mess with people's browsers.

upvoted 0 times

Alida

12 days ago

Yeah, it's a common way for hackers to exploit vulnerabilities.

upvoted 0 times

...

Camellia

15 days ago

I agree, B) Cross-site scripting is a sneaky one.

upvoted 0 times

...

Lemuel

1 months ago

B is definitely the correct answer. Cross-site scripting is the vulnerability that allows you to take over the user's browser. SQL injection is a different type of attack.

upvoted 0 times

Kristian

8 days ago

SQL injection is also a common vulnerability, but not the one described in the question.

upvoted 0 times

...

Angelyn

14 days ago

Cross-site scripting is dangerous, it can take control of the user's browser.

upvoted 0 times

...

Evan

15 days ago

I agree, B) Cross-site scripting is the correct answer.

upvoted 0 times

...

Jacki

1 months ago

I think B is the answer. Cross-site scripting is where you try to hijack the client's browser by injecting malicious scripts. Sounds like the description in the question.

upvoted 0 times