Podcast
Questions and Answers
Which type of attack involves placing code in a scripting language into a web page or media that is interpreted by a client browser?
Which type of attack involves placing code in a scripting language into a web page or media that is interpreted by a client browser?
- Phishing
- Clickjacking
- Cross-site request forgery (XSRF)
- Cross-site scripting (XSS) (correct)
What is the purpose of a cross-site request forgery (XSRF) attack?
What is the purpose of a cross-site request forgery (XSRF) attack?
- To trick users into executing code embedded in a web page
- To initiate a specific activity on another web page or application where the user is authenticated (correct)
- To exploit weaknesses in client-side software
- To trick users into clicking on something they didn't intend to
Which type of attack uses the graphical display capabilities of a browser to trick users into clicking on something they might not intend to?
Which type of attack uses the graphical display capabilities of a browser to trick users into clicking on something they might not intend to?
- Clickjacking (correct)
- Cross-site scripting (XSS)
- Cross-site request forgery (XSRF)
- Phishing