ECSA v10: EC-Council Certified Security Analyst v10

By ECCouncil · Question Mode

QuestionQ147

VerifiedCloud Penetration Testing Methodology

A company identified a critical vulnerability in its hyperconverged infrastructure, which provides services such as computing, networking, and storage resources in a single system. The company also determined that this vulnerability could result in various injection attacks that enable attackers to execute malicious commands as root users. The company decided to immediately implement an appropriate countermeasure to defend against these attacks.

Which of the following defensive mechanisms should the company use?

Explanation

Input validation constrains untrusted data to expected formats and allowable values before it is processed. This helps prevent injection payloads from being interpreted as commands, reducing the risk that attackers can execute malicious commands with root-level privileges. OWASP identifies insufficient input validation as a cause of command-injection vulnerabilities and recommends validation as part of injection prevention.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!