MENU
Morris, an attacker, targeted an application server to manipulate its services. He succeeded by employing input validation attacks such as XSS that exploited vulnerabilities present in the programming logic of an application. Identify the web application layer in which Morris has manipulated the programming logic.
Suggested Answer: A
Get Premium ECSS Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
43 comments · newest first
RE
Regenia
11 months ago
I thought it was the Database layer at first, but now I'm leaning towards Business.
TH
Theodora
11 months ago
Wait, are we sure it's not the Client layer? That seems off.
RO
Rodolfo
11 months ago
I disagree, it's more about the Business layer. Logic manipulation happens there.
EL
Eladia
12 months ago
I think it's the Presentation layer. XSS usually targets that, right?
CA
Catrice
12 months ago
Definitely the Business layer. That's where the logic lives.
KI
King
1 year ago
I feel a bit confused; I thought the database layer was more about data storage. Maybe I need to review the layers again.
LA
Lavina
1 year ago
I practiced a similar question, and I believe the presentation layer is the right answer because it deals with user input and output.
LA
Lawanda
1 year ago
I'm not entirely sure, but I remember something about the business layer being involved in application logic. Could it be that one?
ME
Meaghan
1 year ago
I think the programming logic manipulation is related to the presentation layer since XSS attacks usually target how data is displayed to users.
TY
Tyisha
1 year ago
I'm a little confused here. The question mentions the application server, so I'm wondering if the answer could be the business layer or even the database layer. I'll have to review my notes on web application architecture to be sure.
TH
Theola
1 year ago
Okay, I think I've got it. The presentation layer is where the user interacts with the application, so that's where the input validation attacks would happen. I'm going with B, the presentation layer.
WA
Wava
1 year ago
Hmm, I'm a bit unsure about this one. The question talks about manipulating the programming logic, but I'm not sure if that's the same as the presentation layer. I'll have to think this through a bit more.
EM
Emogene
1 year ago
This one seems pretty straightforward. The question mentions that Morris used input validation attacks like XSS, so the answer has to be the presentation layer.
DO
Donette
1 year ago
I'm a bit unsure about this one, but I'll give it my best shot and see what happens.
NO
Nohemi
1 year ago
I'm leaning towards C, the DEA Form 222, but I'm not 100% sure. I remember learning about the different requirements for ordering controlled substances, but I can't recall the specifics. I'll make my best guess, but I might need to review my notes to be more confident.
CH
Chantell
1 year ago
Ah, I see. The key is that the Citrix Administrator wants to grant full access, but exclude specific configurations. I think the Operator policy sounds like the best fit, as it seems to align with those requirements.
BU
Bulah
2 years ago
I bet Morris was sitting there, rubbing his hands together, thinking 'Time to hack the Presentation layer! Is that a window or a door?'
LE
Lenita
1 year ago
C) Database layer
ST
Stefania
1 year ago
B) Presentation layer
EL
Elly
1 year ago
A) Business layer
AL
Alita
2 years ago
I believe Morris targeted the Business layer because that's where the application's business logic is implemented.
GE
Georgiana
2 years ago
I agree with Kindra. The Presentation layer is responsible for handling user interface and input validation.
AN
Anglea
2 years ago
You guys are overthinking this. The answer is clearly C) Database layer. That's where all the juicy data is stored, so naturally, that's where Morris would target.
LA
Latrice
1 year ago
You guys are overthinking this. The answer is clearly C) Database layer. That's where all the juicy data is stored, so naturally, that's where Morris would target.
EL
Elza
1 year ago
D) Client layer
EU
Eulah
1 year ago
C) Database layer
CH
Cherelle
1 year ago
B) Presentation layer
CA
Carylon
1 year ago
A) Business layer
RE
Remona
1 year ago
You guys are overthinking this. The answer is clearly C) Database layer. That's where all the juicy data is stored, so naturally, that's where Morris would target.
MO
Mozell
1 year ago
D) Client layer
FL
Flo
1 year ago
C) Database layer
BU
Buck
1 year ago
B) Presentation layer
CH
Chanel
1 year ago
A) Business layer
KI
Kindra
2 years ago
I think Morris manipulated the programming logic in the Presentation layer.
BA
Barb
2 years ago
Nah, it's gotta be the Client layer. Morris was messing with the client-side code, like JavaScript, to pull off those XSS attacks.
TR
Truman
2 years ago
Wait, isn't it the Business layer? That's where the core application logic resides, right?
DO
Dong
2 years ago
I think the answer is B) Presentation layer. Morris manipulated the programming logic in the user interface layer of the application.
MA
Margarett
1 year ago
B) Presentation layer is correct. It's where Morris exploited vulnerabilities in the programming logic.
LO
Long
1 year ago
I agree, Morris targeted the Presentation layer to manipulate the application's services.
RI
Rima
1 year ago
D) Client layer
KE
Kent
1 year ago
C) Database layer
EL
Elza
1 year ago
B) Presentation layer
GE
Gerry
1 year ago
A) Business layer