Service A is a Web service with an implementation that uses managed code. To perform a graphics-related operation, this managed code needs to access a graphics function that exist as unmanaged code. A malicious service consumer sends a message to Service A containing a very large numeric value. This value is forwarded by Service A' s logic to the graphics function. As a result, the service crashes and becomes unavailable. The service consumer successfully executed which attack?
Suggested Answer: A
Get Premium S90.19 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
AR
Arletta
11 months ago
Not so sure about that, seems like there could be other factors involved.
TH
Theola
12 months ago
Wait, can a single large number really crash the whole service?
CA
Carey
12 months ago
Definitely a buffer overrun, that’s what happens with large inputs!
RA
Raina
1 year ago
I think it's more of an exception generation attack.
SH
Shelton
1 year ago
Sounds like a classic buffer overrun attack to me.
EV
Evangelina
1 year ago
I don't recall much about XML parser attacks in this context, so I’m leaning towards option A as the most likely answer.
VE
Venita
1 year ago
I practiced a similar question where a service crashed due to input validation issues. It feels like this is also a buffer overrun, but I could be wrong.
LA
Lawrence
1 year ago
I'm not entirely sure, but I remember something about exception generation attacks. Could this be related to how the service handles unexpected input?
TE
Tequila
1 year ago
I think this might be a buffer overrun attack since the large numeric value could exceed the buffer size and cause a crash.
JU
Julian
1 year ago
I'm a bit confused by this question. The options seem to overlap a bit, and I'm not entirely familiar with the Vlocity platform. I'll have to review my notes and try to eliminate the options that don't seem as relevant.
ZO
Zona
1 year ago
I'm not entirely sure about this one. The information seems straightforward, but I want to double-check my understanding before selecting an answer.
EZ
Ezekiel
1 year ago
I'm pretty sure the answer is B. The URI, or Uniform Resource Identifier, is used to identify the specific file that the HTTP GET request is targeting.