Performing CyberOps Using Core Security Technologies (CBRCOR) Questions and Answers
Question 5
Refer to the exhibit.
Where does it signify that a page will be stopped from loading when a scripting attack is detected?
Options:
A.
x-frame-options
B.
x-content-type-options
C.
x-xss-protection
D.
x-test-debug
Answer:
C
Explanation:
The HTTP response header that signifies a page will be stopped from loading when a scripting attack is detected is the x-xss-protection header. When configured with the value “1; mode=block”, it instructs the browser to block the entire page from loading if a cross-site scripting (XSS) attack is detected, rather than attempting to sanitize the potentially malicious script. This header is a browser-side measure to prevent the execution of scripts if an XSS attack is suspected.
The other headers listed serve different purposes:
x-frame-options: Controls whether a browser should be allowed to render a page in a ,
