MENU
An organization is implementing a control within the Application Software Security CIS Control. How can they best protect against injection attacks against their custom web application and database applications?
Suggested Answer: B
Get Premium GCCC Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
NI
Nieves
11 months ago
Wow, I didn't realize how crucial input filtering was!
ME
Melvin
11 months ago
Checking against reserved terms is a good idea, but not foolproof.
KR
Kristal
12 months ago
Isn't using Unicode characters a bit limiting?
AS
Ashton
12 months ago
I disagree, logging alone won't stop injections.
SO
Sonia
12 months ago
Filtering input is a must to prevent injection attacks!
ST
Steffanie
1 year ago
Checking user input against reserved database terms sounds familiar, but I wonder if that’s comprehensive enough to cover all injection vectors.
FE
Fernanda
1 year ago
I'm not entirely sure, but I feel like logging to a central host might help with monitoring, but it doesn't directly prevent injection attacks, right?
LI
Lindsey
1 year ago
I remember we discussed input validation in class, so I think filtering input to only allow safe characters is really important.
AM
Amber
1 year ago
I think using Unicode characters could be a way to limit input, but I’m not convinced it’s the best method for preventing injections.
DE
Delbert
1 year ago
I'm pretty sure the answer is D. Type Name. That's where you'd go to modify an object's default properties before using it in a project.
AB
Abel
1 year ago
Alright, I've got a strategy here. I know C# is a common .NET language, so that's a safe bet. I'll eliminate the others and go with C#.
AL
Allene
1 year ago
I'm a little confused by statement I. Does calcitonin really get stimulated during feeding? I'll need to think that one through more carefully.