Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil 312-39 Exam - Topic 6 Question 58 Discussion

An attacker, in an attempt to exploit the vulnerability in the dynamically generated welcome page, inserted code at the end of the company's URL as follows:http://technosoft.com.com/alert("WARNING: The application has encountered an error");. Identify the attack demonstrated in the above scenario.
A) Cross-site Scripting Attack
B) SQL Injection Attack
C) Denial-of-Service Attack
D) Session Attack

Eccouncil 312-39 Exam - Topic 6 Question 58 Discussion

Actual exam question for Eccouncil's 312-39 exam
Question #: 58
Topic #: 6
[All 312-39 Questions]

An attacker, in an attempt to exploit the vulnerability in the dynamically generated welcome page, inserted code at the end of the company's URL as follows:

http://technosoft.com.com/. Identify the attack demonstrated in the above scenario.

Show Suggested Answer Hide Answer
Suggested Answer: A


by Gertude at Oct 17, 2022, 08:50 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Kathryn
10 months ago
Seems too simple for a real attack, right?
upvoted 0 times
...
Tammy
10 months ago
No doubt, it's XSS for sure!
upvoted 0 times
...
Lavera
10 months ago
Wait, are we sure it's not SQL Injection?
upvoted 0 times
...
Mariann
10 months ago
I agree, that script tag is a giveaway.
upvoted 0 times
...
Caitlin
11 months ago
Definitely a Cross-site Scripting Attack!
upvoted 0 times
...
Oretha
11 months ago
I thought Denial-of-Service Attack was more about overwhelming a server? This seems more like XSS, but I’m still a bit confused.
upvoted 0 times
...
Chana
11 months ago
Definitely feels like a Cross-site Scripting Attack to me. The alert message in the script tag is a classic example.
upvoted 0 times
...
Joaquin
11 months ago
I'm not entirely sure, but it seems like it could also be an SQL Injection Attack? I remember something about code being inserted, but this looks different.
upvoted 0 times
...
Kanisha
11 months ago
I think this is a Cross-site Scripting Attack since the attacker is injecting a script into the URL. It reminds me of a practice question we did on XSS.
upvoted 0 times
...
Eveline
11 months ago
Wait, I'm a little confused. I thought the traffic-table was more for monitoring and analyzing traffic, not for actually setting the parameters. I'll need to double-check my notes to make sure I'm remembering this correctly.
upvoted 0 times
...
Melynda
11 months ago
This question seems straightforward, I think I know the answer.
upvoted 0 times
...
Daniela
11 months ago
Hmm, I'm not entirely sure about the answer here. I'll need to think through the different options and try to eliminate the ones that don't seem right.
upvoted 0 times
...

Save Cancel