GCIH: GIAC Certified Incident HandlerDemo

By GIAC · Question Mode

QuestionQ596

Web Application Injection Attacks

Reviewing developer code for functions such as system, exec, and popen is recommended to reduce the likelihood of which type of public-facing attack?

  • A SQL Injection
  • B Cross-Site Scripting
  • C Command Injection
  • D Server-Side Request Forgery
Explanation

Command injection occurs when untrusted input is incorporated into operating-system command execution, allowing an attacker to alter or run commands. Functions such as system, exec, and popen are common command-execution interfaces and therefore warrant careful review.

Community Discussion

No comments yet. Be the first to start the discussion!