CompTIA Updated SY0-601 Exam Questions and Answers by mattias

Cross-site scripting is a type of web application attack that involves injecting malicious code or scripts into a trusted website or application. The malicious code or script can execute in the browser of the victim who visits the website or application, and can perform actions such as stealing cookies, redirecting to malicious sites, displaying fake content, or compromising the system. References: https://www.comptia.org/blog/what-is-cross-site-scripting https://www.certblaster.com/wp-content/uploads/2020/11/CompTIA-Security-SY0-601-Exam-Objectives-1.0.pdf

Masking is the process of replacing sensitive data with random characters in the same format, without a way to retrieve the original data. This is different from tokenization, which uses a token server to store the relationship between the original and token values. Obfuscation is a broader term that includes masking, but also other methods such as encryption or hashing. Hashing is a one-way function that converts data into a fixed-length output that cannot be reversed. 

The MITRE ATT&CK framework would best support the analyst’s review of the tactics, techniques, and procedures (TTPs) the threat actor was observed using in previous campaigns. The MITRE ATT&CK framework is a knowledge base that describes the common TTPs used by various threat actors across different stages of an attack lifecycle. The framework can help security analysts understand how adversaries operate, what tools they use, what vulnerabilities they exploit, what indicators they leave behind, etc. The framework can also help security analysts improve their detection and response capabilities by providing recommendations and best practices.