MENU
A system with a simple logging mechanism has not been given much attention during development, this system is now being targeted by attackers, if the attacker wants to perform a new line injection attack, what will he/she inject into the log file?
Suggested Answer: A
Get Premium CFA-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
39 comments · newest first
VI
Vilma
10 months ago
Wait, people can really do that with logs? That's wild!
MA
Mattie
10 months ago
Definitely, plaintext is the easiest way to go!
GE
Gennie
10 months ago
I think they’d inject plaintext.
DA
Dan
11 months ago
HTML tags? Seems a bit off for a log injection.
DI
Dino
11 months ago
Not so sure about that, multiple pipes could work too.
SU
Sue
11 months ago
I feel like HTML tags could be a distraction here, but I can't shake the feeling that the answer is more about the structure of the log itself.
AS
Ashlyn
11 months ago
This question feels familiar; I practiced one about log injection before. I wonder if it's the single pipe character or something else entirely.
JU
Julian
12 months ago
I think it might be something like a newline character, but I can't recall if it's just plain text or something more specific.
SA
Santos
12 months ago
I remember something about new line injection being related to how logs handle input, but I'm not sure what exactly to inject.
MA
Marci
12 months ago
I think the answer is C, multiple pipe characters. That's the classic way to perform a new line injection attack, right?
RE
Regenia
1 year ago
I'm a bit confused by the wording of this question. Can an attacker really inject anything they want into a log file? I'll have to review my notes on this type of attack.
RA
Raelene
1 year ago
Okay, let's see... If the attacker wants to perform a new line injection attack, they would likely inject a newline character, so I'm going to go with option C.
YU
Yuki
1 year ago
Hmm, I'm not entirely sure about this one. I'll need to think it through carefully.
CE
Celeste
1 year ago
This seems like a straightforward question about new line injection attacks. I'm pretty confident I know the answer.
GO
Golda
1 year ago
I agree with Alex, plaintext seems like a safer option for the attacker.
AL
Alex
1 year ago
I think the attacker will inject plaintext to avoid detection.
AN
Anglea
1 year ago
Option C all the way! Gotta love those multiple pipe characters. It's like seasoning for your log file, am I right?
BU
Bulah
1 year ago
C) Multiple pipe characters
DI
Dion
1 year ago
C) Multiple pipe characters
EV
Evan
1 year ago
B) Single pipe character
DE
Denise
1 year ago
A) Plaintext
CO
Cortney
1 year ago
B) Single pipe character
BU
Bulah
1 year ago
A) Plaintext
GE
Genevieve
1 year ago
I disagree, I believe the attacker will inject HTML tags.
VE
Velda
1 year ago
Ah, the age-old new line injection question. Option C is the way to go, my friend. Multiple pipe characters are the hackers' weapon of choice.
FR
France
1 year ago
Definitely, security should always be a top priority in software development.
EV
Eva
1 year ago
So, it's important to always sanitize user input to prevent such attacks.
MI
Minna
1 year ago
That's correct! Multiple pipe characters can be used to perform a new line injection attack.
LE
Leonida
1 year ago
Option C) Multiple pipe characters
JU
Julian
1 year ago
Hmm, this one's tricky. I'm leaning towards option D, just to spice things up a bit. Inject some HTML tags, make the log file more interesting, you know?
LA
Lavonda
1 year ago
I think the attacker will inject multiple pipe characters.
WI
Willow
1 year ago
I'm going with option A. Plaintext is the way to go, keep it simple and straightforward.
JE
Jesusa
1 year ago
A: Really? I still think plaintext is the safest option.
CO
Colette
1 year ago
B: No, I believe they would inject HTML tags.
JO
Jolene
1 year ago
A: I think the attacker would inject multiple pipe characters.
LA
Laurel
1 year ago
Definitely option C. Multiple pipe characters are a classic for new line injection attacks. This is a textbook example.
ET
Ethan
1 year ago
Yes, we should definitely prioritize securing our logging mechanisms to prevent attacks like this.
VA
Vallie
1 year ago
It's important to always be aware of potential vulnerabilities like this in our systems.
AN
Anglea
1 year ago
I agree, multiple pipe characters are commonly used for new line injection attacks.