Discuss GIAC GCCC Exam Topic 10 Question 89

An attacker is able to successfully access a web application as root using ' or 1 = 1 . as the password. The successful access

indicates a failure of what process?

AInput Validation

BOutput Sanitization

CURL Encoding

DAccount Management

Suggested Answer: A

Get Premium GCCC Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

21 comments · newest first

Aliza 2 days ago

I think it's clear, Input Validation is crucial here.

Twila 7 days ago

Output Sanitization could be a factor too, but not the main issue.

Lashawna 12 days ago

Agreed, ' or 1 = 1 shows no checks on input.

Ruby 17 days ago

This is definitely about Input Validation.

Zoila 22 days ago

Yeah, if they had validated inputs, this wouldn't happen.

Honey 27 days ago

Input Validation failure leads to this kind of attack.

Carey 1 month ago

Account Management isn't the issue; it's how input is handled.

Stanton 1 month ago

URL Encoding isn't relevant here. It's all about validating input.

Casey 1 month ago

Output Sanitization could be a factor, but mainly Input Validation.

Sherman 2 months ago

I think it's Input Validation too. No checks on user input.

Venita 2 months ago

Agreed, ' or 1 = 1 is classic SQL injection.

Lonna 2 months ago

This is definitely about Input Validation.

Luisa 2 months ago

Output Sanitization could also be a factor here.

Christoper 2 months ago

I think it's more about Account Management, honestly.

Caitlin 2 months ago

Wait, can you really log in like that? Sounds sketchy.

Norah 3 months ago

Totally agree, how did they not catch that?

Ciara 3 months ago

That's definitely a failure of Input Validation.

Rebbecca 3 months ago

I guess it could also relate to account management, but it seems more like a failure in how inputs are handled.

Bulah 3 months ago

This question feels familiar; I think we practiced a similar one where input validation was the key issue.

Eva 3 months ago

I'm not entirely sure, but I remember something about output sanitization being important for preventing these kinds of attacks too.

Xochitl 3 months ago

I think this might be related to input validation since the attacker used a SQL injection technique.

GIAC GCCC Exam - Topic 10 Question 89 Discussion