What type of software vulnerability occurs when untrusted user code commands are output directly into another user’s browser view, enabling script injection exploits? MCQ with Answer and Explanation

What type of software vulnerability occurs when untrusted user code commands are output directly into another user’s browser view, enabling script injection exploits?
A. Zero-Day Exploit
B. Buffer Overflow
C. Cross-Site Scripting (XSS)
D. SQL Injection
Answer: Option C
Solution (By JKSSB Mock Tests)
XSS allows threat actors to execute malicious client-side scripts inside other users' browser views by compromising vulnerable web outputs.

Discuss this Question (0)

No comments yet. Be the first to start the discussion!

Practice More Cyber Security Questions

Question #1
What type of script vulnerability targets database processing fields by passing unvalidated parameters directly into an application’s dynamic query logic?
A. Denial of Service Loop
B. Buffer Overflow Exploit
C. SQL Injection
D. Cross-Site Scripting

Correct Answer: Option C


Explanation:
SQL injection executes arbitrary database commands by inserting malicious SQL code statements into unvalidated input fields.

This question belongs to: Computer Cyber Security
Question #2
What is the role of a security awareness program?
A. To manage network traffic
B. To install security patches
C. To educate users about security risks and best practices
D. To increase system performance

Correct Answer: Option C


Explanation:
A security awareness program educates users about various security risks, such as phishing and malware, and promotes best practices to protect against them.

This question belongs to: Computer Cyber Security
Question #3
A security policy that assumes no user or device should be trusted by default, requiring continuous verification at every stage of network access, is known as:
A. Stateful Network Control
B. Zero Trust Architecture
C. Least Privilege Access
D. Defense in Depth

Correct Answer: Option B


Explanation:
Zero Trust is an IT security model based on the premise of 'never trust, always verify,' requiring strict identity validation for every person and device trying to access resources on a private network.

This question belongs to: Computer Cyber Security