Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

ISC2 CAP Exam - Topic 4 Question 91 Discussion

Actual exam question for ISC2's CAP exam

Question #: 91
Topic #: 4

[All CAP Questions]

The payload {{7*7}} can be used for determining which of the following vulnerabilities?

AServer Side Template Injection (SSTI)

BClient-Side Template Injection (CSTI)

CBoth 1 and 2

DNone of the above

Show Suggested Answer

Suggested Answer: A

by Paris at Jul 15, 2024, 02:29 AM

Limited Time Offer

25%

Off

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tonette

7 months ago

Nah, I’d say none of the above.

upvoted 0 times

...

Cristal

8 months ago

Wait, is it really used for CSTI? That’s surprising!

upvoted 0 times

...

India

8 months ago

Both 1 and 2 seem possible, right?

upvoted 0 times

...

Irma

8 months ago

I think it can be used for CSTI too.

upvoted 0 times

...

Hana

8 months ago

Definitely SSTI, that payload is classic!

upvoted 0 times

...

Suzi

9 months ago

I’m leaning towards option A, but I remember there being nuances between SSTI and CSTI that could confuse things.

upvoted 0 times

...

Sharee

9 months ago

I feel like this is a tricky one. I thought SSTI was more common with server-side languages, but I could see how CSTI might apply too.

upvoted 0 times

...

Barb

9 months ago

I remember practicing with similar questions, and I think that payload can be used for both SSTI and CSTI, but I can't recall the exact details.

upvoted 0 times

...

Roy

9 months ago

I think the payload {{7*7}} is related to template injections, but I'm not sure if it's specifically for server-side or client-side.

upvoted 0 times

...

Erick

9 months ago

This seems straightforward to me. The payload with the math expression is a classic way to check for both server-side and client-side template injection vulnerabilities. I'll mark option C as my answer.

upvoted 0 times

...

Gwenn

9 months ago

Okay, I've seen these types of template injection questions before. The math expression in the payload is a common technique to test for SSTI and CSTI. I'm pretty confident I can figure this one out.

upvoted 0 times

...

Cassi

9 months ago

I'm not too sure about this one. The question mentions a payload, but I'm not familiar with how that would be used to detect different types of template injection. I'll have to think this through carefully.

upvoted 0 times

...

Louvenia

9 months ago

Hmm, this looks like a template injection question. I think the payload with the math expression could be used to test for both server-side and client-side template injection vulnerabilities.

upvoted 0 times

...

Dulce

9 months ago

I'm a bit confused by the wording of this question. Does the payload itself determine the vulnerability, or is it just used to test for them? I'll need to review my notes on template injection to make sure I understand the concepts.

upvoted 0 times

...

Glenna

9 months ago

App-ID and WildFire Cloud threat analysis seem like good options for preventing unknown attacks. I'm confident those are the right choices here.

upvoted 0 times

...

Lucille

9 months ago

I've got this! The answer is B, RetePlus. That's the mode designed to optimize performance for large numbers of objects. I'm confident in that one.

upvoted 0 times

...

Patti

10 months ago

I'm pretty confident that the answer is Linux swap spaces, so I'll go with option B.

upvoted 0 times

...

Lisha

1 year ago

Wait, is that payload supposed to be a magic spell or something? I'm just going to go with D and call it a day.

upvoted 0 times

Antione

1 year ago

Sharika: It's used for determining Server Side Template Injection (SSTI).

upvoted 0 times

...

Sharika

1 year ago

User 2: Oh, I see. So which vulnerability does the payload {{7*7}} help determine?

upvoted 0 times

...

Viola

1 year ago

User 1: No, it's not a magic spell. It's used for finding vulnerabilities.

upvoted 0 times

...

...

Gregoria

1 year ago

I can't believe they're still using that classic SSTI payload. Option C is the clear choice here.

upvoted 0 times

Dewitt

1 year ago

Definitely, let's go with option C then.

upvoted 0 times

...

Sharee

1 year ago

I think we should go with option C, it seems like the most comprehensive choice.

upvoted 0 times

...

Mitsue

1 year ago

Yeah, that payload is a classic for a reason.

upvoted 0 times

...

Truman

1 year ago

I agree, option C covers both SSTI and CSTI vulnerabilities.

upvoted 0 times

...

...

Tricia

1 year ago

Ah, the old '{{7*7}}' trick! Definitely SSTI. Option C is the way to go.

upvoted 0 times

...

Lauran

1 year ago

Hmm, the question mentions a specific payload, so I think it's likely targeting SSTI. I'll go with C as well.

upvoted 0 times

Quiana

1 year ago

I think C is the correct answer too.

upvoted 0 times

...

Abraham

1 year ago

I agree, the payload seems to be related to SSTI.

upvoted 0 times

...

...

Helaine

1 year ago

I'm not sure, but I think the payload 49 can also be used for Client-Side Template Injection (CSTI).

upvoted 0 times

...

Freeman

1 year ago

I agree with Della, 7*7 can definitely exploit Server Side Template Injection (SSTI).

upvoted 0 times

...

Veronica

1 year ago

The payload {{7*7}} seems related to server-side template injection (SSTI), so I'm going with option C.

upvoted 0 times

Lelia

1 year ago

I don't think it's related to any vulnerabilities, so I'll choose option D.

upvoted 0 times

...

Cherry

1 year ago

I'm not sure, but I think it could be both server-side and client-side template injection, so I'll go with option C.

upvoted 0 times

...

Janella

1 year ago

I believe it could also be used for client-side template injection, so I'm going with option B.

upvoted 0 times

...

Larue

1 year ago

I think the payload {{7*7}} is related to server-side template injection, so I'm going with option A.

upvoted 0 times

...

...

Della

1 year ago

I think the payload 49 can be used for Server Side Template Injection (SSTI).

upvoted 0 times

...