Cross-site scripting (XSS) attacks have three main types: Persistent (stored), Reflected (non-stored), and DOM-based. Option D 'Inflicted' is NOT a recognized XSS attack type - this is the correct 'not valid' answer. Options A, B, C are all valid XSS attack types, so they are incorrect answers to this negative-framed question.