What is a cross-site scripting attack, and how do you defend against it?

An interviewer will ask this question, which, of course, is technical in nature to both test your knowledge and to ensure that you know how to combat this type of attack. As a seasoned ICT administrator, you should be able to answer this question easily with both the definition of the term and a description of how you would defend against it. Since you won't know the technical expertise of the interviewer, keep your answer at a high level. They will ask follow-up questions if they need more information from you.

"Cross-site scripting or XSS is a type of security vulnerability that is most commonly found in web applications. It enables attackers to inject a malicious script into the web pages. This allows attackers to bypass common security measures. The best way to combat XSS attacks is to sanitize any input from the users."