Which of the following is a common type of attack against web applications? MCQ with Answer and Explanation

Which of the following is a common type of attack against web applications?
A. Cross-site scripting (XSS)
B. Phishing
C. Man-in-the-middle
D. Denial-of-service
Answer: Option A
Solution (By JKSSB Mock Tests)
Cross-site scripting (XSS) is a common attack that injects malicious scripts into web applications, exploiting vulnerabilities to steal data or hijack sessions.

Discuss this Question (0)

No comments yet. Be the first to start the discussion!

Practice More Cyber Security Questions

Question #1
Which security measure bundles diverse defenses—such as network firewalls, end-user security awareness training, patch cycles, and MFA—to eliminate single points of failure?
A. Stateful Boundary Control
B. Defense in Depth
C. Least Privilege Access
D. Zero Trust Model

Correct Answer: Option B


Explanation:
Defense in Depth combines technical, physical, and administrative security layers to build redundant protection boundaries and avoid single points of failure.

This question belongs to: Computer Cyber Security
Question #2
What technique uses automated scripts to test a massive list of leaked username and password combinations across multiple websites to hijack accounts?
A. SQL Injection
B. Session Hijacking
C. Buffer Overflow Exploit
D. Credential Stuffing

Correct Answer: Option D


Explanation:
Credential stuffing exploits password reuse habits by testing databases of leaked credentials against automated web login forms.

This question belongs to: Computer Cyber Security
Question #3
What type of attack involves a threat actor tracking, altering, or intercepting data packets moving between a user's mobile device and a web server without either party knowing?
A. Brute Force Guessing
B. Man-in-the-Middle (MitM) Attack
C. Distributed Denial Squeeze
D. SQL Injection Exploit

Correct Answer: Option B


Explanation:
MitM exploits intercept communication links between separate nodes, enabling attackers to spy on, log, or manipulate data traffic.

This question belongs to: Computer Cyber Security