MENU
Service A is a Web service that accesses the Student table in a shared database in order to store XML-based student records. When invoked, the GetStudent operation of Service A uses a Student ID value to retrieve the record of a single student by executing an XPath query. An attacker sends a malicious message that manipulates the XPath query to return all the student records. Which of the following attacks was carried out?
Suggested Answer: C
Get Premium S90.19 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
10 comments · newest first
DO
Dottie
12 months ago
No way it's none of the above!
TE
Telma
12 months ago
Wait, can an XPath query really be exploited like that?
BL
Blondell
1 year ago
Seems like a classic case of XPath manipulation.
CE
Celia
1 year ago
I thought it was SQL injection at first.
KA
Katheryn
1 year ago
Definitely an XPath injection attack.
SO
Socorro
1 year ago
I'm feeling confident about this one. Constructive dismissal is when the employee resigns due to the employer's conduct, so the answer has to be B.
ST
Stephaine
1 year ago
I think TCP port 23 is used by Telnet, but I'm not completely sure; it might have been just a quick flashback from a study session.
KE
Kenneth
1 year ago
We discussed how lead-time uncertainty definitely plays a role in safety stock calculations, so I lean towards D being the correct answer.
SA
Sage
1 year ago
The share-for-share exchange seems like the most straightforward option, but I'll need to double-check the math to make sure it meets the premium requirement.
FR
France
1 year ago
The training aspect is definitely something I practiced in case questions. I think everyone needs to be on the same page for these processes to work.