CCOA: Certified Cybersecurity Operations Analyst

By Isaca · Question Mode

QuestionQ78

VerifiedAdversarial Tactics, Techniques, and Procedures

An attacker compromised an e-commerce website by injecting arbitrary syntax that the underlying operating system received and executed. Which tactic did the attacker MOST likely use?

Explanation

Command injection occurs when attacker-controlled input is incorporated into an operating-system command and executed by the server.

Community Discussion

No comments yet. Be the first to start the discussion!