Which of the following is a type of attack that uses malicious code to exploit vulnerabilities in web applications? MCQ with Answer and Explanation

Which of the following is a type of attack that uses malicious code to exploit vulnerabilities in web applications?
A. Cross-site scripting (XSS)
B. Man-in-the-middle
C. Denial-of-service
D. Phishing
Answer: Option A
Solution (By JKSSB Mock Tests)
Cross-site scripting (XSS) is a type of attack where malicious scripts are injected into web applications, exploiting vulnerabilities to steal data or hijack sessions.

Discuss this Question (0)

No comments yet. Be the first to start the discussion!

Practice More Cyber Security Questions

Question #1
Which firewall asset tracks the ongoing state of active data interactions, filtering out incoming data packets that do not correspond to an established, verified session?
A. Stateful Inspection Firewall
B. Circuit Level Gateway
C. Application Layer Proxy
D. Stateless Packet Filter

Correct Answer: Option A


Explanation:
Stateful firewalls maintain connection tables tracking the state of active network interactions, blocking unexpected or unsolicited inbound traffic.

This question belongs to: Computer Cyber Security
Question #2
Which of the following is a type of malware that hides in the operating system and is difficult to detect?
A. Spyware
B. Ransomware
C. Rootkit
D. Adware

Correct Answer: Option C


Explanation:
A rootkit is a type of malware that hides deep within the operating system, often at the kernel level, making it very difficult to detect and remove.

This question belongs to: Computer Cyber Security
Question #3
What is the purpose of a security awareness program?
A. To install security patches
B. To increase system performance
C. To manage network traffic
D. To educate employees about cybersecurity risks and best practices

Correct Answer: Option D


Explanation:
A security awareness program educates employees about various cybersecurity risks and promotes best practices to protect the organization.

This question belongs to: Computer Cyber Security