CCOA: Certified Cybersecurity Operations AnalystDemo

By Isaca · Question Mode

QuestionQ37

Adversarial Tactics, Techniques, and Procedures

An organization experienced a breach through a web-application attack against a SQL database in which user inputs were not validated. This is BEST described as which type of attack?

  • A Broken access control
  • B Buffer overflow
  • C X-Path
  • D Injection
Explanation

SQL injection is an injection attack in which untrusted input alters or supplies SQL executed by an application against a database. Missing input validation can contribute to this vulnerability.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!