A security engineer is reviewing a web application that allows users to set a 'language' preference. The application passes this value to a shell command that generates a localized report. The engineer suspects command injection. Which injection point is most likely to be exploited?

The database connection string, because it is used to fetch the report data.

The server's environment variables, because they are set by the system.

The HTTP User-Agent header, because it is often logged and used in commands.

The 'language' parameter in the HTTP request, because it is user-controlled and used in a shell command.

A development team is rewriting a legacy feature that uses user-supplied filenames in a shell command to generate thumbnails. The team wants to eliminate command injection without breaking the ability to process files. Which approach is the most secure and practical?

Sanitize the filename by removing all non-alphanumeric characters before passing it to the shell.

Add a Web Application Firewall (WAF) rule to block requests containing shell metacharacters.

Use a server-side image-processing library that accepts a file path directly, avoiding shell invocation.

Run the shell command with a low-privileged service account and hope the impact is limited.

A web application has a feature that sends an email using a user-supplied recipient address. The application constructs a command like `sendmail `. Which of the following is the most likely injection point?

The recipient address field in the web form

Which of the following is a common injection point for command injection attacks?

HTTP request headers such as User-Agent or Referer

The web server's SSL certificate

The server's hostname configuration file

The client's IP address as determined by the server

EC-CouncilWeb Application Hacking and Security

Domain 2Objective 2

Command Injection WAHS Practice Questions (Page 2)

Part of the Injection Attacks domain, which makes up ~12% of our current practice bank. EC-Council does not publish an official question count, but from its 360-minute exam (~145–240 total, ~17–29 in this domain), expect 6–10 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

5concepts

Questions 6–10

6application · medium
A security engineer is reviewing a web application that allows users to set a 'language' preference. The application passes this value to a shell command that generates a localized report. The engineer suspects command injection. Which injection point is most likely to be exploited?
Select an answer first
7application · medium
A development team is rewriting a legacy feature that uses user-supplied filenames in a shell command to generate thumbnails. The team wants to eliminate command injection without breaking the ability to process files. Which approach is the most secure and practical?
Select an answer first
8application · easy
A web application has a feature that sends an email using a user-supplied recipient address. The application constructs a command like `sendmail <address>`. Which of the following is the most likely injection point?
Select an answer first
9foundation · easy
Which of the following characters is commonly used to chain multiple commands in a shell?
Select an answer first
10foundation · easy
Which of the following is a common injection point for command injection attacks?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to WAHS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “WAHS” is a trademark of its owner, used for identification only.

Command Injection WAHS Practice Questions (Page 2)

Questions 6–10

A security engineer is reviewing a web application that allows users to set a 'language' preference. The application passes this value to a shell command that generates a localized report. The engineer suspects command injection. Which injection point is most likely to be exploited?

A development team is rewriting a legacy feature that uses user-supplied filenames in a shell command to generate thumbnails. The team wants to eliminate command injection without breaking the ability to process files. Which approach is the most secure and practical?

A web application has a feature that sends an email using a user-supplied recipient address. The application constructs a command like `sendmail <address>`. Which of the following is the most likely injection point?

Which of the following characters is commonly used to chain multiple commands in a shell?

Which of the following is a common injection point for command injection attacks?

Keep studying — Injection Attacks