CompTIA SY0-701 Exam - Topic 5 Question 26 Discussion

Actual exam question for CompTIA's SY0-701 exam

Question #: 26
Topic #: 5

[All SY0-701 Questions]

Which of the following examples would be best mitigated by input sanitization?

A<script>alert ('Warning!') ,-</script>

Bnmap - 10.11.1.130

CEmail message: 'Click this link to get your free gift card.'

DBrowser message: 'Your connection is not private.'

Show Suggested Answer

Suggested Answer: A

This example of a script injection attack would be best mitigated by input sanitization. Input sanitization involves cleaning or filtering user inputs to ensure that they do not contain harmful data, such as malicious scripts. This prevents attackers from executing script-based attacks (e.g., Cross-Site Scripting or XSS).

Nmap command is unrelated to input sanitization, as it is a network scanning tool.

Email phishing attempts require different mitigations, such as user training.

Browser warnings about insecure connections involve encryption protocols, not input validation

by Herman at Sep 17, 2024, 12:52 AM

Limited Time Offer

25%

Off

Get Premium SY0-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Donte

3 months ago

A is the obvious choice, no doubt!

upvoted 0 times

...

Ronny

3 months ago

Wait, are we sure D doesn't need it too?

upvoted 0 times

...

Margot

3 months ago

No way, A is the only one that needs it!

upvoted 0 times

...

Lore

4 months ago

I think B could also use some sanitization.

upvoted 0 times

...

Delisa

4 months ago

Definitely A, that's classic XSS!

upvoted 0 times

...

Eun

4 months ago

I’m confused about option D; it seems more like a warning message rather than something that would need sanitization.

upvoted 0 times

...

Tammara

4 months ago

I'm not entirely sure, but I think option C could relate to phishing rather than input sanitization.

upvoted 0 times

...

Ivette

4 months ago

I remember practicing with similar questions, and I feel like option B might be more about network scanning rather than input sanitization.

upvoted 0 times

...

Lawanda

5 months ago

I think input sanitization is mainly about preventing code injection, so I’m leaning towards option A with the script tag.

upvoted 0 times

...

Hermila

5 months ago

Option A is definitely the one that would benefit most from input sanitization. The other examples seem to involve different types of security risks that might require different mitigation strategies. I'll need to review my notes on input sanitization and other security best practices to make sure I choose the right approach.

upvoted 0 times

...

Lamar

5 months ago

I think option A is the clear choice here. Anything with a script tag is a big red flag and needs to be sanitized before it can be safely used. The other options don't seem to involve the same kind of injection risk.

upvoted 0 times

...

Eun

5 months ago

Hmm, I'm not sure about the other options. The nmap command in B and the email message in C don't seem like they would be mitigated by input sanitization. I'll have to think about those a bit more.

upvoted 0 times

...

Corinne

5 months ago

This one seems pretty straightforward. The script tag in option A is clearly a case of potential code injection, so input sanitization would be the best way to mitigate that.

upvoted 0 times

...

Glenn

5 months ago

I'm a little confused on this one. Is input sanitization the right approach for all of these, or are some of them better handled in other ways? I want to make sure I understand the nuances before I commit to an answer.

upvoted 0 times

...

Yesenia

5 months ago

I thought I heard something about fire-safe storage for microfilm, but I can't remember the details. Does anyone know if that applies here?

upvoted 0 times

...

Janine

1 year ago

D seems more like a TLS/SSL configuration problem, not an input sanitization issue. I'm voting for C.

upvoted 0 times

Helaine

1 year ago

B doesn't seem like it needs input sanitization, it's more about network scanning.

upvoted 0 times

...

Iola

1 year ago

I think A is a dangerous example that needs to be mitigated with input sanitization.

upvoted 0 times

...

Apolonia

1 year ago

I agree, C is definitely a good example for input sanitization.

upvoted 0 times

...

Kenneth

1 year ago

B is just a standard network scanning tool, not really a security issue. I'd go with C on this one.

upvoted 0 times

Rhea

1 year ago

C) Email message: \'Click this link to get your free gift card.\'

upvoted 0 times

...

Ellsworth

1 year ago

I think option A could also benefit from input sanitization, as it can prevent cross-site scripting attacks.

upvoted 0 times

...

Kristin

1 year ago

Haha, looks like someone's trying to hack the exam questions! But seriously, A is the obvious choice.

upvoted 0 times

...

Jennie

1 year ago

Option A looks like a clear case of cross-site scripting (XSS) vulnerability. Input sanitization would definitely help mitigate that.

upvoted 0 times

Layla

1 year ago

Input sanitization would help prevent that kind of phishing attack.

upvoted 0 times

...

Malika

1 year ago

C) Email message: Click this link to get your free gift card.

upvoted 0 times

...

Patti

1 year ago

That looks like a cross-site scripting vulnerability.

upvoted 0 times

...

Chauncey

1 year ago

upvoted 0 times

...

Venita

1 year ago

C is the clear winner here. Unsanitized email links can lead to phishing attacks. Input sanitization is crucial for that.

upvoted 0 times

...

Bettyann

1 year ago

B seems pretty harmless to me, but A is the clear choice. Gotta keep those script kiddies at bay!

upvoted 0 times

Fletcher

1 year ago

Definitely, can't be too careful with security.

upvoted 0 times

...

Jamika

1 year ago

Agreed, we need to protect against malicious scripts.

upvoted 0 times

...

Dortha

1 year ago

A is definitely the best choice for input sanitization.

upvoted 0 times

...

Carmen

1 year ago

D) Browser message: \'Your connection is not private.\'

upvoted 0 times

...

Rory

1 year ago

C) Email message: \'Click this link to get your free gift card.\'

upvoted 0 times

...

Tyra

1 year ago

B) nmap - 10.11.1.130

upvoted 0 times

...

Michael

1 year ago

upvoted 0 times

...

Troy

1 year ago

I agree with Nan, because input sanitization can help prevent malicious code in email messages.

upvoted 0 times

...

Elina

1 year ago

I say C. Those phishing emails are the worst, gotta watch out for that stuff.

upvoted 0 times

Tasia

1 year ago

I say C. Those phishing emails are the worst, gotta watch out for that stuff.

upvoted 0 times

...

Detra

1 year ago

D) Browser message: \'Your connection is not private.\'

upvoted 0 times

...

Wendell

1 year ago

C) Email message: \'Click this link to get your free gift card.\'

upvoted 0 times

...

Verda

1 year ago

B) nmap - 10.11.1.130

upvoted 0 times

...

Silva

1 year ago

upvoted 0 times

...

Noemi

1 year ago

Definitely option A! That script tag is just begging to be sanitized.

upvoted 0 times

Paulina

1 year ago

upvoted 0 times

...

Nan

1 year ago

I think the best example for input sanitization would be option C.

upvoted 0 times

...