A network inventory application has a search feature that returns device details. A penetration test reveals that entering ' OR 1=1 -- in the search box returns all records. The application uses an ORM but the developer wrote a raw query for this feature. Which change should be made to eliminate the vulnerability?

Add a CSRF token to the search form

Rewrite the query to use the ORM's parameter binding or a prepared statement

Limit the search input to 10 characters

Escape single quotes in the input before building the query

CiscoCertified Network Associate Automation (CCNA Automation)

Domain 4Objective 10

10. Describe Top OWASP Threats (such as XSS, SQL Injections, and CSRF) 200-901 Practice Questions (Page 9)

Part of the 4.0 Application Deployment and Security domain, which accounts for 15% of the 200-901 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

5concepts

15%of the exam

Questions 41–41

41application · medium
A network inventory application has a search feature that returns device details. A penetration test reveals that entering ' OR 1=1 -- in the search box returns all records. The application uses an ORM but the developer wrote a raw query for this feature. Which change should be made to eliminate the vulnerability?
Select an answer first

Finished these 1 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 200-901

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “200-901” is a trademark of its owner, used for identification only.

10. Describe Top OWASP Threats (such as XSS, SQL Injections, and CSRF) 200-901 Practice Questions (Page 9)

Questions 41–41

Keep studying — 4.0 Application Deployment and Security