ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 700 - 220-1102 discussion

Report
Export

Which of the following attacks can a hacker use to execute code on a user's computer when the user visits a specially prepared, malicious website?

A.

DoS

Answers
A.

DoS

B.

Spoofing

Answers
B.

Spoofing

C.

XSS

Answers
C.

XSS

D.

SQL injection

Answers
D.

SQL injection

Suggested answer: C

Explanation:

Detailed

Cross-site scripting (XSS) (Option C) allows attackers to inject malicious scripts into web pages viewed by users. When the user visits the compromised site, the script runs in the user's browser, potentially allowing the attacker to steal data or perform unauthorized actions. XSS is a common vulnerability in web applications that allows code execution.

DoS (Option A) disrupts services but doesn't involve executing code on a user's device.

Spoofing (Option B) involves impersonating another device or user but doesn't execute code.

SQL injection (Option D) attacks a database and is unrelated to executing code on the user's computer.

CompTIA A+ Core 2

Reference:

2.4 - Explain common social engineering attacks, including XSS.

asked 27/10/2024
Richard Fuller
28 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first