MENU
A hacker is able to access privileged information via an IoT portal by modifying a SQL parameter in a URL. Which of the following BEST describes the vulnerability that allows this type of attack?
Suggested Answer: D
Get Premium ITS-110 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
RY
Ryan
1 month ago
But what about A? Unvalidated redirects could also apply.
VE
Verda
2 months ago
I agree, C fits. Direct access to objects is risky.
MY
Myong
2 months ago
I think it's C. Unsecure direct object references make sense here.
RU
Rueben
2 months ago
Wait, are we sure it's not about malformed URLs? That sounds plausible too.
AM
Amina
2 months ago
Totally agree with C, it's a classic vulnerability.
RU
Rusty
2 months ago
C seems right, but I'm surprised it can be that easy to exploit!
QU
Quentin
2 months ago
I think it's more about unvalidated redirects, though.
TH
Thea
3 months ago
This is definitely a case of unsecure direct object references.
AL
Alex
3 months ago
I think it's definitely about unvalidated redirects, but I might be mixing it up with something else I studied. This is tricky!
RI
Rikki
3 months ago
I feel like the answer has to do with session management, but I can't recall the specifics of how that connects to the URL parameter modification.
SH
Sheridan
3 months ago
I remember practicing a question about SQL injection, and it seems like that could fit here too. Is that what they mean by unhandled malformed URLs?
RA
Raylene
3 months ago
I think this might relate to unsecure direct object references, but I'm not entirely sure if that's the right term for SQL manipulation.