CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

By ISC · Question Mode

QuestionQ96

Secure Software Concepts

Which vulnerability arises when an application directly uses, or concatenates, potentially hostile input with data file or stream functions?

  • A Insecure cryptographic storage
  • B Malicious file execution
  • C Insecure communication
  • D Injection flaw
Explanation

Malicious file execution occurs when untrusted input is incorporated directly into file or stream function calls, enabling an attacker to manipulate the file or resource the application accesses or executes.

Community Discussion

No comments yet. Be the first to start the discussion!