Arcitura Education S90.19 Exam - Topic 3 Question 35 Discussion

Actual exam question for Arcitura Education's S90.19 exam

Question #: 35
Topic #: 3

The service contract for Service A uses an XML schema that does not specify the maximum length for the Customer-Address XML element. A service consumer sends a message that contains a very long string of characters inside the Customer-Address XML element. This can be an indication of what types of attacks?

AXML parser attack

BBuffer overrun attack

CInsufficient authorization attack

DXPath injection attack

Show Suggested Answer

Suggested Answer: A, B

by Christiane at May 09, 2022, 07:41 PM

Limited Time Offer

25%

Off

Get Premium S90.19 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Peter

6 months ago

Nah, XPath injection doesn't fit this scenario at all.

upvoted 0 times

...

Letha

6 months ago

Wow, I didn't realize long strings could lead to such issues!

upvoted 0 times

...

Annalee

6 months ago

Not sure about that, seems more like insufficient authorization.

upvoted 0 times

...

Merissa

6 months ago

I think it could also be an XML parser attack.

upvoted 0 times

...

Chantell

6 months ago

Definitely a buffer overrun attack.

upvoted 0 times

...

Ilona

7 months ago

This question seems straightforward, but I want to make sure I understand the key considerations for developing a risk and control model. I'll need to carefully review the options and think through the implications of each.

upvoted 0 times

...

Charlene

7 months ago

I'm pretty confident that the answer is B. The map() method will allow us to transform the TechName objects into their techName strings, and then we can print them out using forEach().

upvoted 0 times

...

Hannah

7 months ago

I think the in-stock rate is relevant for measuring how well the vendor-managed inventory is working, but I'm not entirely sure.

upvoted 0 times

...

Jestine

7 months ago

I remember we discussed the importance of supplier visits in class, but I'm not sure if it's always necessary.

upvoted 0 times

...