Exam 101 All QuestionsBrowse all questions from this exam
Question 45

Which is NOT an ASM protection method for cross site scripting?

    Correct Answer: C

    Token injection is typically associated with preventing CSRF (Cross-Site Request Forgery) attacks, not cross-site scripting (XSS). The other options—signatures, URI character set limiting, and parameter character set limiting—are commonly used as protection methods against XSS attacks.

Discussion
zerotfeiOption: C

C should be a protection method as well, with reference to CSRT https://support.f5.com/csp/article/K11930