MENU
Ryan, a malicious hacker submits Cross-Site Scripting (XSS) exploit code to the Website of Internet forum for online discussion. When a user visits the infected Web page, code gets automatically executed and Ryan can easily perform acts like account hijacking, history theft etc. Which of the following types of Cross-Site Scripting attack Ryan intends to do?
Suggested Answer: D
Get Premium GCIH Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
29 comments · newest first
OR
Oretha
6 months ago
But the scenario fits D) Persistent best. User data at risk.
DE
Delila
6 months ago
I feel like B) DOM is relevant too. Manipulates the page.
GL
Glory
6 months ago
I lean towards D) Persistent. More damage over time.
KA
Kate
6 months ago
Not so sure. Could be A) Non persistent too. Quick attacks.
GA
Gaynell
7 months ago
Agreed, D) Persistent makes sense. It's long-term.
KR
Kristofer
7 months ago
I think it's D) Persistent. The code stays on the site.
VI
Vicky
7 months ago
Not sure about that, but it sounds sketchy.
LO
Loise
8 months ago
Wait, can XSS really steal history? That's wild!
MU
Muriel
8 months ago
Definitely a persistent attack!
JO
Johana
8 months ago
D. Persistent XSS, because who doesn't love a good old-fashioned data breach?
CA
Carissa
8 months ago
Hmm, I'd say A. Non-persistent XSS is the classic choice for forum shenanigans.
MI
Mickie
8 months ago
B. DOM-based XSS is the most elegant way to hijack those accounts.
CR
Craig
8 months ago
Definitely D. Persistent XSS is the way to go for maximum damage.
EL
Eliz
9 months ago
I practiced a question similar to this, and I think persistent is the right answer because it involves stored data on the server.
CL
Clorinda
9 months ago
I feel like this could be a DOM-based attack too, but I need to double-check how that differs from persistent XSS.
AL
Almeta
9 months ago
I'm not entirely sure, but I remember something about non-persistent XSS being more about immediate execution without saving on the server.
CA
Cathrine
9 months ago
I think this might be a persistent XSS attack since the code stays on the website and affects multiple users over time.
AL
Alberta
9 months ago
Okay, I've got it now. The question is asking about the type of XSS attack, so the answer must be either persistent or DOM-based. I'll go with persistent since the hacker is submitting the code directly.
TU
Tuyet
9 months ago
Persistent XSS attacks store the malicious code on the server, so it gets executed every time the page is loaded. That sounds like what's happening here, with the hacker submitting the code to the forum.
JA
Jaleesa
10 months ago
Sounds like a persistent XSS attack to me.
AL
Alyce
10 months ago
I think it's non-persistent, right?
RE
Reiko
10 months ago
B. DOM-based XSS, the hacker's version of a mic drop.
NE
Nenita
11 months ago
I'm a bit confused on the difference between persistent and non-persistent XSS attacks. I'll need to review that part of the material before answering.
NA
Nathan
11 months ago
I think this is a DOM-based XSS attack, where the malicious code is injected into the website's Document Object Model and executed when the user visits the page.
BR
Brett
5 months ago
Definitely, the injection happens in the DOM.
RI
Richelle
6 months ago
Persistent could be a possibility, but DOM fits better.
MI
Mickie
6 months ago
Non-persistent seems unlikely here.
HE
Hermila
10 months ago
Yeah, the code runs in the user's browser.
LI
Lisha
10 months ago
I believe it's a DOM-based XSS attack too.