GCIA: GIAC Certified Intrusion AnalystDemo

By GIAC · Question Mode

QuestionQ321

Application Protocols

Ryan, a malicious hacker, submits Cross-Site Scripting (XSS) exploit code to the website of an Internet forum used for online discussion. When a user visits the infected web page, the code executes automatically, allowing Ryan to perform actions such as account hijacking and history theft.

Which type of Cross-Site Scripting attack does Ryan intend to perform?

  • A Document Object Model (DOM)
  • B Non persistent
  • C SAX
  • D Persistent
Explanation

Persistent XSS occurs when malicious script is stored by a website, such as in forum content, and is later served to and executed in the browsers of users who visit the affected page.

Community Discussion

No comments yet. Be the first to start the discussion!