Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Isaca Cybersecurity-Audit-Certificate Exam - Topic 1 Question 20 Discussion

Posted by Pearlene on Jul 04, 2024 at 04:36 PM

Which of the following injects malicious scripts into a trusted website to infect a target?

Get Premium Cybersecurity-Audit-Certificate Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
38 comments · newest first
SU
Suzan 10 months ago
B is right, but I’m still learning about all these attacks.
GI
Giuseppe 11 months ago
Surprised to see D listed here, that’s not it at all!
FE
Felton 11 months ago
No way, it’s not C. That’s a different type of attack.
WI
Willis 11 months ago
I thought it was A, but B makes more sense.
RO
Roslyn 11 months ago
Definitely B, cross-site scripting is the one!
AN
An 12 months ago
I thought denial-of-service attacks were more about overwhelming a site rather than injecting scripts. So, I’m not sure if that’s the right choice.
TW
Twila 12 months ago
I’m leaning towards B as well, but I keep mixing it up with SQL injection. They both seem related to web vulnerabilities.
DE
Denna 12 months ago
I remember discussing malicious code in class, but it feels like that could apply to multiple options here.
SU
Sunshine 1 year ago
I think the answer might be B, Cross-site scripting, but I'm not entirely sure. It sounds familiar from our last practice session.
NO
Nohemi 1 year ago
I'm pretty confident that cross-site scripting is the correct answer. It's a common web application vulnerability that allows attackers to inject malicious scripts into a trusted website, which can then be executed by the victim's browser.
VE
Veronica 1 year ago
Denial-of-service and SQL injection attacks are different types of attacks, so those aren't the right answers here. I think the key is that the question is specifically asking about injecting malicious scripts, so cross-site scripting is the way to go.
TA
Tanesha 1 year ago
Okay, I've got this. Cross-site scripting is the technique where attackers inject malicious scripts into a trusted website, which can then be executed by the victim's browser. That's the answer I'm going with.
NO
Noe 1 year ago
Hmm, I'm a bit confused. I know malicious code can be used to attack websites, but I'm not sure if that's the same as injecting scripts. I'll have to think this through more carefully.
AL
Alaine 1 year ago
I'm pretty sure this is a cross-site scripting (XSS) attack, where malicious scripts are injected into a trusted website to infect the target.
CE
Celestine 1 year ago
This seems like a tricky one. I'll need to carefully consider each option and think through the different scenarios that could lead to the individual file and folder content being unavailable.
LU
Lucina 1 year ago
This one seems pretty straightforward. I think DMVPN is the way to go since it supports multicast and can be encrypted with IPsec.
RE
Reid 1 year ago
Hmm, I'm a bit confused on the soft dollar concept here. I'll need to review the details of the case and the soft dollar standards more closely to make sure I understand the issue.
MA
Ma 1 year ago
I'm a bit unsure about this one. I'll need to review the differences between login, refresh, and logout to determine the right approach here.
AL
Alaine 1 year ago
Gotta be B. Cross-site scripting. I mean, who doesn't love a good old-fashioned script injection, am I right? It's like the spice of life for web security enthusiasts.
MY
Myong 1 year ago
↳ replying to Alaine
Yep, B is the answer. Cross-site scripting can be dangerous if not properly protected against.
TY
Tyisha 1 year ago
↳ replying to Alaine
I agree, B is the correct answer. Cross-site scripting is a common method used by attackers.
AR
Arlean 1 year ago
↳ replying to Alaine
Definitely B. Cross-site scripting is the way to go for injecting those scripts.
TR
Tracey 1 year ago
↳ replying to Alaine
D) Structure query language attack
SH
Shawana 1 year ago
↳ replying to Alaine
C) Denial-of-service attack
BI
Billye 1 year ago
↳ replying to Alaine
B) Cross-site scripting
MA
Malcolm 1 year ago
↳ replying to Alaine
A) Malicious code
OT
Otis 1 year ago
Definitely B. Cross-site scripting. It's the classic way to inject those nasty scripts and infect a website. A real classic in the hacker's playbook.
SH
Shaun 1 year ago
↳ replying to Otis
It's important to be aware of these types of attacks to protect websites from being compromised.
LE
Leota 1 year ago
↳ replying to Otis
I agree, cross-site scripting is a common method used by hackers.
NE
Nell 1 year ago
I'm not sure, but I think A) Malicious code could also be a possibility.
SU
Suzi 1 year ago
I agree with Esteban, because cross-site scripting is specifically designed to inject malicious scripts into trusted websites.
KI
Kirby 2 years ago
Hmm, I'm gonna go with B. Cross-site scripting. It's like the ninja of web attacks - slipping in those malicious scripts without anyone even knowing!
ES
Esteban 2 years ago
I think the answer is B) Cross-site scripting.
CO
Cordelia 2 years ago
Oooh, cross-site scripting? That's like a sneaky way to get your hands on someone else's website, isn't it? Sounds like a super fun (and totally legal) hack to try out!
DO
Doug 1 year ago
↳ replying to Cordelia
It's important to always protect websites from vulnerabilities like that.
RE
Rebeca 1 year ago
↳ replying to Cordelia
I heard it can lead to stealing sensitive information from users.
PO
Portia 1 year ago
↳ replying to Cordelia
It's not legal though, it's considered a cyber attack.
EL
Elke 1 year ago
↳ replying to Cordelia
Yeah, cross-site scripting is definitely a sneaky way to compromise a website.
0/2000 characters

Save Cancel