QUESTION: 29

An organization recently suffered from a web-application attack that resulted in stolen user session cookie information. The attacker was able to obtain the information when a user's browser executed a script upon visiting a compromised website. What type of attack MOST likely occurred?

SQL injection (SQLi)
Extensible Markup Language (XML) external entities
Cross-Site Scripting (XSS)
Cross-Site Request Forgery (CSRF)

Answer(s): C

Reveal Solution Next Question

QUESTION: 30

An attack utilizing social engineering and a malicious Uniform Resource Locator (URL) link to take advantage of a victim's existing browser session with a web application is an example of which of the following types of attack?