FCP_FWB_AD-7.4: FCP - FortiWeb 7.4 Administrator Attack Practice Questions

Which is an example of a cross-site scripting (XSS) attack?

• AA. SELECT username FROM accounts WHERE username='admin';-- ' AND password='password';
• BB. <img src="http://badfile/nothere" onerror=alert(document.cookie);>
• CC. SELECT username FROM accounts WHERE username='XSS' ' AND password='alert("http://badurl.com")';
• DD. <IMG SRC="xss.png">

Refer to the exhibit. Attack ID20000010is brute force logins. Which statement is accurate about the potential attack?

• AA. The attacker has successfully retrieved the credentials to www.example.com.
• BB. www.example.com is running attacks against the client 192.168.1.11.
• CC. The attack has happened 10 times.
• DD. 192.168.1.11 is sending suspicious traffic to FortiWeb.