Today’s 220-1202 CompTIA A+ Pop Quiz: It’s all about the fundamentals

Which of the following would be the most likely way for an attacker to deliver the script required for an XSS attack?