Security+ Set X

Question 1

XML Injection

Answer 1

attack method where malicious XML is passed as input to exploit a vulnerability in the target app.

Question 2

XOR (exclusive OR)

Answer 2

an operation that outputs to true only if one input is true and the other input is false.

Question 3

XSRF (cross-site request forgery)

Answer 3

malicious script hosted on the attackers site that can exploit a session started on another site in the same browser. Also known as client-side request forgery or CSRF

Question 4

XSS (cross-site scripting)

Answer 4

a malicious script hosted on the attackers site or coded in a link injected onto a trusted site designed to compromise clients browsing the trusted site, circumventing the browsers security model of trusted zones.

Question 5

XaaS

Answer 5

experssing the concept thatn most types of IT requirements can be deployed as a cloud service model.