GCIH: GIAC Certified Incident HandlerDemo

By GIAC · Question Mode

QuestionQ220

Exploiting Insecure Web Application References

Review the image below. Which of the following defensive actions could be used to control the activity?

Question Image

  • A Block all traffic to the web server until a full investigation has been completed
  • B Create an IDS signature that blocks iamawesome.nasl on the web servers
  • C Sanitize the input from external users to the web server
  • D Ping back to the host that uploaded the script to identify the host
Explanation

Untrusted external input must be validated and contextually output-encoded before it is included in a web response. This prevents attacker-supplied content from being interpreted as active markup or a script/link in the browser, mitigating cross-site scripting and related injection behavior.

Community Discussion

No comments yet. Be the first to start the discussion!