What type of software vulnerability allows attackers to inject malicious client-side scripts into web pages viewed by other users, bypassing browser security controls? MCQ with Answer and Explanation

What type of software vulnerability allows attackers to inject malicious client-side scripts into web pages viewed by other users, bypassing browser security controls?
A. Buffer Overflow
B. SQL Injection
C. Cross-Site Scripting (XSS)
D. Zero-Day Exploit
Answer: Option C
Solution (By JKSSB Mock Tests)
XSS vulnerabilities occur when web applications include unvalidated data in web outputs, allowing threat actors to inject malicious scripts into a victim's browser session.

Discuss this Question (0)

No comments yet. Be the first to start the discussion!

Practice More Cyber Security Questions

Question #1
What component of an antivirus system isolates infected or highly suspicious files in a protected, inaccessible directory to prevent them from executing or spreading code?
A. Heuristic Analyzer
B. Firewall Exclusion List
C. Sandbox Controller
D. Quarantine Vault

Correct Answer: Option D


Explanation:
Antivirus programs move flagged files into a quarantine vault, isolating them from the rest of the filesystem to neutralize potential threats.

This question belongs to: Computer Cyber Security
Question #2
Which of the following is a type of cyber attack that involves intercepting and altering communications between two parties?
A. SQL injection
B. Phishing
C. Denial-of-service
D. Man-in-the-middle (MITM)

Correct Answer: Option D


Explanation:
In a man-in-the-middle attack, the attacker secretly intercepts and possibly alters the communication between two parties who believe they are directly communicating with each other.

This question belongs to: Computer Cyber Security
Question #3
What is 'spear phishing'?
A. A type of virus
B. A targeted phishing attack aimed at a specific individual or organization
C. A physical attack
D. A mass email phishing campaign

Correct Answer: Option B


Explanation:
Spear phishing is a highly targeted form of phishing where attackers personalize their messages to a specific individual or group to increase the likelihood of success.

This question belongs to: Computer Cyber Security