Eccouncil ECSS Exam - Topic 2 Question 75 Discussion

Actual exam question for Eccouncil's ECSS exam

Question #: 75
Topic #: 2

Morris, an attacker, targeted an application server to manipulate its services. He succeeded by employing input validation attacks such as XSS that exploited vulnerabilities present in the programming logic of an application. Identify the web application layer in which Morris has manipulated the programming logic.

ABusiness layer

BPresentation layer

CDatabase layer

DClient layer

Show Suggested Answer

Suggested Answer: A

by Stephen at Feb 09, 2024, 02:06 AM

Limited Time Offer

25%

Off

Get Premium ECSS Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Regenia

9 months ago

I thought it was the Database layer at first, but now I'm leaning towards Business.

upvoted 0 times

...

Theodora

9 months ago

Wait, are we sure it's not the Client layer? That seems off.

upvoted 0 times

...

Rodolfo

10 months ago

I disagree, it's more about the Business layer. Logic manipulation happens there.

upvoted 0 times

...

Eladia

10 months ago

I think it's the Presentation layer. XSS usually targets that, right?

upvoted 0 times

...

Catrice

10 months ago

Definitely the Business layer. That's where the logic lives.

upvoted 0 times

...

King

10 months ago

I feel a bit confused; I thought the database layer was more about data storage. Maybe I need to review the layers again.

upvoted 0 times

...

Lavina

11 months ago

I practiced a similar question, and I believe the presentation layer is the right answer because it deals with user input and output.

upvoted 0 times

...

Lawanda

11 months ago

I'm not entirely sure, but I remember something about the business layer being involved in application logic. Could it be that one?

upvoted 0 times

...

Meaghan

11 months ago

I think the programming logic manipulation is related to the presentation layer since XSS attacks usually target how data is displayed to users.

upvoted 0 times

...

Tyisha

11 months ago

I'm a little confused here. The question mentions the application server, so I'm wondering if the answer could be the business layer or even the database layer. I'll have to review my notes on web application architecture to be sure.

upvoted 0 times

...

Theola

11 months ago

Okay, I think I've got it. The presentation layer is where the user interacts with the application, so that's where the input validation attacks would happen. I'm going with B, the presentation layer.

upvoted 0 times

...

Wava

11 months ago

Hmm, I'm a bit unsure about this one. The question talks about manipulating the programming logic, but I'm not sure if that's the same as the presentation layer. I'll have to think this through a bit more.

upvoted 0 times

...

Emogene

11 months ago

This one seems pretty straightforward. The question mentions that Morris used input validation attacks like XSS, so the answer has to be the presentation layer.

upvoted 0 times

...

Donette

11 months ago

I'm a bit unsure about this one, but I'll give it my best shot and see what happens.

upvoted 0 times

...

Nohemi

11 months ago

I'm leaning towards C, the DEA Form 222, but I'm not 100% sure. I remember learning about the different requirements for ordering controlled substances, but I can't recall the specifics. I'll make my best guess, but I might need to review my notes to be more confident.

upvoted 0 times

...

Chantell

11 months ago

Ah, I see. The key is that the Citrix Administrator wants to grant full access, but exclude specific configurations. I think the Operator policy sounds like the best fit, as it seems to align with those requirements.

upvoted 0 times

...

Bulah

1 year ago

I bet Morris was sitting there, rubbing his hands together, thinking 'Time to hack the Presentation layer! Is that a window or a door?'

upvoted 0 times

Lenita

1 year ago

C) Database layer

upvoted 0 times

...

Stefania

1 year ago

B) Presentation layer

upvoted 0 times

...

Elly

1 year ago

A) Business layer

upvoted 0 times

...

Alita

1 year ago

I believe Morris targeted the Business layer because that's where the application's business logic is implemented.

upvoted 0 times

...

Georgiana

1 year ago

I agree with Kindra. The Presentation layer is responsible for handling user interface and input validation.

upvoted 0 times

...

Anglea

1 year ago

You guys are overthinking this. The answer is clearly C) Database layer. That's where all the juicy data is stored, so naturally, that's where Morris would target.

upvoted 0 times

Latrice

1 year ago

You guys are overthinking this. The answer is clearly C) Database layer. That's where all the juicy data is stored, so naturally, that's where Morris would target.

upvoted 0 times

...

Elza

1 year ago

D) Client layer

upvoted 0 times

...

Eulah

1 year ago

C) Database layer

upvoted 0 times

...

Cherelle

1 year ago

B) Presentation layer

upvoted 0 times

...

Carylon

1 year ago

A) Business layer

upvoted 0 times

...

Remona

1 year ago

You guys are overthinking this. The answer is clearly C) Database layer. That's where all the juicy data is stored, so naturally, that's where Morris would target.

upvoted 0 times

...