GCIA: GIAC Certified Intrusion AnalystDemo

By GIAC · Question Mode

QuestionQ32

Application Protocols

Which of the following web attacks is carried out by manipulating programming-language code, such as SQL, Perl, or Java, that is present in web pages?

  • A Command injection attack
  • B Code injection attack
  • C Cross-Site Request Forgery
  • D Cross-Site Scripting attack
Explanation

A code injection attack exploits insufficient validation or unsafe handling of input so that attacker-controlled code or code fragments are interpreted by an application. SQL injection is a common example of this broader category.

Community Discussion

No comments yet. Be the first to start the discussion!