Arcitura Education S90.19 Exam - Topic 1 Question 55 Discussion

Actual exam question for Arcitura Education's S90.19 exam

Question #: 55
Topic #: 1

Service A is a Web service with an implementation that uses managed code. To perform a graphics-related operation, this managed code needs to access a graphics function that exist as unmanaged code. A malicious service consumer sends a message to Service A containing a very large numeric value. This value is forwarded by Service A' s logic to the graphics function. As a result, the service crashes and becomes unavailable. The service consumer successfully executed which attack?

ABuffer overrun attack

BException generation attack

CXML parser attack

DNone of the above

Show Suggested Answer

Suggested Answer: A

by Cristal at Jul 31, 2022, 12:29 PM

Limited Time Offer

25%

Off

Get Premium S90.19 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Arletta

5 months ago

Not so sure about that, seems like there could be other factors involved.

upvoted 0 times

...

Theola

6 months ago

Wait, can a single large number really crash the whole service?

upvoted 0 times

...

Carey

6 months ago

Definitely a buffer overrun, that’s what happens with large inputs!

upvoted 0 times

...

Raina

6 months ago

I think it's more of an exception generation attack.

upvoted 0 times

...

Shelton

6 months ago

Sounds like a classic buffer overrun attack to me.

upvoted 0 times

...

Evangelina

6 months ago

I don't recall much about XML parser attacks in this context, so I’m leaning towards option A as the most likely answer.

upvoted 0 times

...

Venita

6 months ago

I practiced a similar question where a service crashed due to input validation issues. It feels like this is also a buffer overrun, but I could be wrong.

upvoted 0 times

...

Lawrence

6 months ago

I'm not entirely sure, but I remember something about exception generation attacks. Could this be related to how the service handles unexpected input?

upvoted 0 times

...

Tequila

6 months ago

I think this might be a buffer overrun attack since the large numeric value could exceed the buffer size and cause a crash.

upvoted 0 times

...

Julian

7 months ago

I'm a bit confused by this question. The options seem to overlap a bit, and I'm not entirely familiar with the Vlocity platform. I'll have to review my notes and try to eliminate the options that don't seem as relevant.

upvoted 0 times

...

Zona

7 months ago

I'm not entirely sure about this one. The information seems straightforward, but I want to double-check my understanding before selecting an answer.

upvoted 0 times

...

Ezekiel

7 months ago

I'm pretty sure the answer is B. The URI, or Uniform Resource Identifier, is used to identify the specific file that the HTTP GET request is targeting.

upvoted 0 times

...