Exam CS0-003 topic 1 question 427 discussion

The correct answer is: D. XSS (Cross-Site Scripting) Explanation: • XSS (Cross-Site Scripting) occurs when an attacker injects malicious scripts into web pages that are then executed by other users’ browsers. This often happens on websites that allow user-generated content, like public posts, without proper input sanitization. • In this case, the pop-ups asking for credentials are a classic symptom of an XSS attack, where the attacker injects JavaScript code to steal credentials via fake login prompts. Why not the others? • A. Rootkit – A type of malware that hides on a system, not related to website pop-ups. • B. SQL injection – Targets backend databases and usually results in data leaks or authentication bypass, not front-end pop-ups. • C. CSRF (Cross-Site Request Forgery) – Tricks users into making unwanted requests, but does not directly cause pop-ups asking for credentials.