GCIH: GIAC Certified Incident HandlerDemo

By GIAC · Question Mode

QuestionQ178

Web Application Injection Attacks

An administrator must protect the organization’s IIS web servers from Cross-Site Scripting attacks. Which action should the administrator take?

  • A Use the Anti-XSS library from Microsoft
  • B Configure two-factor authentication for clients
  • C Use a random element when setting session cookies
  • D Configure application whitelisting on the IIS server
Explanation

Microsoft’s Anti-XSS library provides context-appropriate encoding for HTML, XML, CSS, and URL output, preventing untrusted input from being interpreted as executable script in a user’s browser.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!