CCOA: Certified Cybersecurity Operations AnalystDemo

By Isaca · Question Mode

QuestionQ78

Adversarial Tactics, Techniques, and Procedures

An attacker compromised an e-commerce website by injecting arbitrary syntax that the underlying operating system received and executed. Which tactic did the attacker MOST likely use?

  • A Command injection
  • B Lightweight Directory Access Protocol (LDAP) injection
  • C Insecure direct object reference
  • D SQL injection
Explanation

Command injection occurs when attacker-controlled input is incorporated into an operating-system command and executed by the server.

Community Discussion

No comments yet. Be the first to start the discussion!