GIAC Exam GCFA Topic 1 Question 52 Discussion

Actual exam question for GIAC's GCFA exam

Question #: 52
Topic #: 1

[All GCFA Questions]

John works as a professional Ethical Hacker. He is assigned a project to test the security of www.weare-secure.com. He enters a single quote in the input field of the login page of the We-are-secure Web site and receives the following error message:

Microsoft OLE DB Provider for ODBC Drivers error '0x80040E14'

This error message shows that the We-are-secure Website is vulnerable to __________.

AAn XSS attack

BA SQL injection attack

CA Denial-of-Service attack

DA buffer overflow

Show Suggested Answer

Suggested Answer: B

by Aleisha at Aug 23, 2024, 06:35 AM

Limited Time Offer

25%

Off

Get Premium GCFA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Milly

10 months ago

Hmm, this is a tricky one. I'm leaning towards SQL injection, but I can't rule out the other options just yet. As an 'ethical' hacker, John should probably try to gather a bit more information before jumping to conclusions.

upvoted 0 times

Carole

9 months ago

I agree, jumping to conclusions too quickly could be risky.

upvoted 0 times

...

Nieves

9 months ago

Maybe John should try to gather more information before deciding.

upvoted 0 times

...

Tula

9 months ago

It could also be an XSS attack.

upvoted 0 times

...

Merrilee

9 months ago

I think it's a SQL injection attack.

upvoted 0 times

...

Whitney

10 months ago

I believe it could also be an XSS attack, as input validation seems to be lacking.

upvoted 0 times

...

Keshia

10 months ago

Haha, looks like John's a real 'ethical' hacker, isn't he? I bet he's just trying to impress his boss with his mad 'hacking' skills. Seriously though, this is a tough one. I'd have to do some more research to figure it out.

upvoted 0 times

Yan

10 months ago

B) A SQL injection attack

upvoted 0 times

...

Cyril

10 months ago

A) An XSS attack

upvoted 0 times

...

Sabra

10 months ago

I agree with Paris, the error message indicates a SQL injection vulnerability.

upvoted 0 times

...

Allene

10 months ago

I think it's a bit premature to jump to conclusions. The error message alone doesn't provide enough information to definitively identify the vulnerability. It could be anything from SQL injection to a simple input validation issue.

upvoted 0 times

...

Ardella

10 months ago

I'm not so sure about that. The error message could also indicate a buffer overflow vulnerability. We need more information to determine the exact nature of the vulnerability.

upvoted 0 times

...