ECCouncil EC-Council Certified Security Analyst (ECSA) V10 412-79v10 Question # 32 Topic 4 Discussion

ECCouncil EC-Council Certified Security Analyst (ECSA) V10 412-79v10 Question # 32 Topic 4 Discussion

412-79v10 Exam Topic 4 Question 32 Discussion:
Question #: 32
Topic #: 4

You are carrying out the last round of testing for your new website before it goes live. The website has many dynamic pages and connects to a SQL backend that accesses your product inventory in a database. You come across a web security site that recommends inputting the following code into a search field on web pages to check for vulnerabilities:

<script>alert("This is a test.")</script>

When you type this and click on search, you receive a pop-up window that says:

"This is a test."

What is the result of this test?


A.

Your website is vulnerable to web bugs


B.

Your website is vulnerable to XSS


C.

Your website is not vulnerable


D.

Your website is vulnerable to SQL injection


Get Premium 412-79v10 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.