>_COMMAND ZERO
What was the likely motivation of the user who posted the message on the forum containing this code?","acceptedAnswer":{"@type":"Answer","text":"Correct Answer: A. Reconnaissance. Explanation: The script that Melania discovered merely pops up a message on a user's screen and does not perform any more malicious action. This type of script, using an alert() call, is commonly used to probe websites for cross-site scripting vulnerabilities."}}]},{"@context":"https://schema.org","@type":"Article","headline":"Melania is reviewing posts to a user forum on her company's website, and when she browses a certain...","description":"The script that Melania discovered merely pops up a message on a user's screen and does not perform any more malicious action. This type of script,...","url":"https://command-zero.com/learn/cissp/melania-is-reviewing-posts-to-a-user-forum-on-her-company-s","author":{"@type":"Organization","name":"Command Zero","url":"https://command-zero.com"},"publisher":{"@type":"Organization","name":"Command Zero","logo":{"@type":"ImageObject","url":"https://command-zero.com/logo.png"}},"about":{"@type":"Thing","name":"CISSP"},"educationalLevel":"intermediate","keywords":"Software Development Security","isAccessibleForFree":true},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Learn","item":"https://command-zero.com/learn"},{"@type":"ListItem","position":2,"name":"CISSP","item":"https://command-zero.com/learn/cissp"},{"@type":"ListItem","position":3,"name":"Melania is reviewing posts to a user forum on her...","item":"https://command-zero.com/learn/cissp/melania-is-reviewing-posts-to-a-user-forum-on-her-company-s"}]}]
medium
Single Answer
0

Melania is reviewing posts to a user forum on her company's website, and when she browses a certain post, a message pops up in a dialog box on her screen reading “Alert.” She reviews the source code for the post and finds the following code snippet: <script>alert(‘Alert’);</script> What was the likely motivation of the user who posted the message on the forum containing this code?

Answer Options

A

Reconnaissance

B

Theft of sensitive information

C

Credential stealing

D

Social engineering

Correct Answer: A

Explanation

The script that Melania discovered merely pops up a message on a user's screen and does not perform any more malicious action. This type of script, using an alert() call, is commonly used to probe websites for cross-site scripting vulnerabilities.