MENU
An attacker injects malicious query strings in user input fields to bypass web service authentication mechanisms and to access back-end databases. Which of the following attacks is this?
Suggested Answer: D
Get Premium ECSAv10 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
XO
Xochitl
11 months ago
Wait, can you really bypass authentication like that? Sounds risky!
AR
Arlene
11 months ago
Pretty sure it's XPath Injection Attack.
LA
Lachelle
12 months ago
I thought SOAP Injection was more common for this kind of thing?
JA
Jamal
12 months ago
Definitely not Frame Injection, that's for sure.
RO
Rodolfo
1 year ago
Sounds like a classic LDAP Injection Attack to me.
DA
Dannie
1 year ago
Frame Injection sounds off to me; I don't think that's the right term for this type of attack. I remember it being more about data access issues.
SK
Skye
1 year ago
I practiced a question similar to this, and I feel like it could be XPath Injection too. The way they manipulate queries seems to fit.
GI
Gilma
1 year ago
I think this might be related to LDAP Injection, but I'm not entirely sure. I remember it involves manipulating queries.
MA
Maricela
1 year ago
I'm leaning towards SOAP Injection, but I can't recall the specifics. It feels like it could be any of these options honestly.
MA
Markus
1 year ago
I'm a bit confused by this question. The options seem to be talking about different Agile concepts, and I'm not sure which one specifically answers the question about converting a product backlog item. I'll have to review my notes on Agile terminology before answering this one.
JE
Jerry
1 year ago
I'm a little confused by the different options here. I'll need to review the details of each one to understand the pros and cons before deciding.
CH
Chaya
1 year ago
The key is to match only lowercase letters, so I'm leaning towards A. [a-z]+ seems like the right pattern.