Internet and Web

RSS (Rich Site Summary) was first introduced by Netscape in 1999 for the My.Netscape.Com portal. It was created to allow users to aggregate content from multiple websites in one location.

WAP was designed to be similar to and inherit from Internet standards like HTTP, but optimized for wireless constraints (low bandwidth, small screens). It wasn't developed completely independently, built from scratch without reference, or just linked - it inherited concepts from existing Internet protocols.

To solve this question, the user needs to know about the different types of web applications that exist and their characteristics.

The correct answer is:

C. Web services

Explanation:

Web services are a new breed of web application that allows different systems to communicate with each other over the internet. They are a collection of standards-based technologies that provide a way for applications to exchange information, regardless of the platform or programming language used to build them. Web services are designed for machine-to-machine communication, enabling different systems to exchange data and functionality without the need for human intervention.

Option A, Web controls, refers to user interface elements that are used to interact with web applications. They include buttons, text boxes, drop-down lists, and other interactive elements that allow users to interact with web pages.

Option B, Web contents, refers to the information and media that is displayed on web pages. This includes text, images, videos, and other multimedia elements that are used to convey information to users.

Option D, Web pages, refers to the documents that are served by web servers and displayed in web browsers. Web pages can be static or dynamic, and can contain a variety of content, including text, images, videos, and interactive elements.

Therefore, the correct answer is C, Web services.

Web Services are specifically designed to enable data exchange between different applications and platforms. They provide standardized interfaces and protocols that allow cross-platform communication, unlike web pages or web applications which are typically platform or browser-specific.

The World Wide Web Consortium (W3C) is the main international standards organization for the World Wide Web. W3C develops web standards and specifications to ensure interoperability across different platforms and browsers.

The anchor tag with href attribute creates hyperlinks. The link text goes between opening and closing tags. Options using 'url' or 'name' attributes are incorrect; only href is valid for specifying the destination URL.

The target='_blank' attribute opens links in a new browser window or tab. 'new' is not a valid target value; only specific keywords like _blank work. The underscore prefix is required for special target values.

Persistent (or Stored) Cross-Site Scripting occurs when malicious input, such as a malicious link or script, is stored on the target server and then executed when other users view the compromised page. Since the link is saved and affects other users who click it, it is persistent rather than reflected.

Displaying unrelated content after a successful login, while the URL is correct, indicates that malicious script stored on the server is executed for the user’s session, which is characteristic of a persistent XSS attack.

DNS poisoning corrupts the DNS resolution process, causing the correct URL to resolve to a malicious server's IP address instead of the legitimate one. Phishing tricks users into visiting fake sites, social engineering manipulates people, and eavesdropping involves passive listening.

Log injection involves inserting malicious entries into log files. A non-working link could be crafted to add fake entries (like 'downloaded whole website') to server logs, framing the user. MITM attacks intercept traffic, persistent XSS stores malicious scripts, phishing tricks users, and the scenario specifically mentions being accused based on logs.

Internet Explorer's MIME sniffing feature can treat images as HTML if they contain HTML-like content. An attacker could upload an image file with embedded script content; when IE processes it as HTML due to MIME sniffing, the script executes (Cross-site Scripting by MIME sniffing). Regular XSS requires a script tag, log injection targets logs, and identity theft involves stealing personal information.

Configuration Management weakness means backup files weren't properly protected or removed from the web server. This allows users to access sensitive backup files directly. Sensitive Information Disclosure is the consequence, not the vulnerability itself. Input validation filters user input, and vulnerable cookie refers to cookie security issues.

Web browsers present a graphical interface that includes icons, buttons, and menus, allowing users to click and navigate between pages; terms like EJB or WebService describe server‑side components, not the user interface.