What form of software vulnerability allows threat actors to execute arbitrary client-side scripts inside other users' browsers by compromising vulnerable web outputs? MCQ with Answer and Explanation
What form of software vulnerability allows threat actors to execute arbitrary client-side scripts inside other users' browsers by compromising vulnerable web outputs?
A. Buffer Overflow
B. Cross-Site Scripting (XSS)
C. Zero-Day Exploit
D. SQL Injection
Answer: Option B
Solution (By JKSSB Mock Tests)
XSS allows threat actors to execute malicious client-side scripts inside other users' browser views by compromising vulnerable web outputs.
What type of attack relies on social engineering to drop malicious flash drives in a company parking lot, hoping an employee will plug one into a corporate workstation out of curiosity?
Explanation:
Baiting uses the promise of an item or curiosity (like a misplaced USB drive with an intriguing label) to entice victims into compromising their own system security.
What form of malicious script runs automatically whenever an infected Microsoft Office document or database sheet is loaded, exploiting built-in macro tools?
Explanation:
Macro viruses exploit programming languages embedded inside productivity suite applications, running automated scripts when files are opened.
Explanation:
Verifying the sender's email address and being cautious with links and attachments are important steps to protect against phishing and malware.
No comments yet. Be the first to start the discussion!