Web Application Injection Attacks GCIH Practice Questions (Page 16)

Questions 76–80

1. 76foundation · easy

   Why should user input be restricted to a small set of allowed header fields?

   • ATo improve email deliverability.
   • BTo make the email code simpler.
   • CTo reduce the attack surface by preventing users from controlling sensitive headers like Bcc or Reply-To.
   • DTo prevent SQL injection in the email database.
   Reveal Solution Discussion Select an answer first
2. 77foundation · easy

   What is XPath injection?

   • AAn attack that injects malicious SQL into an XML database.
   • BAn attack that exploits a buffer overflow in the XML parser.
   • CAn attack that manipulates XPath queries to access unauthorized data in an XML document.
   • DAn attack that injects malicious commands into the operating system.
   Reveal Solution Discussion Select an answer first
4. 78application · medium

   A security team is hardening an application that uses XPath queries. They want to prevent XPath injection. Which mitigation is most effective?

   • AUse a WAF to block XPath injection payloads
   • BValidate input with a regex that only allows alphanumeric characters
   • CUse parameterized XPath queries with a library that supports binding variables
   • DEscape all single quotes in user input
   Reveal Solution Discussion Select an answer first
5. 79foundation · easy

   Which of the following is an example of an ORM injection vulnerability?

   • AConcatenating user input into a raw SQL query executed through the ORM.
   • BUsing the ORM's find() method with a primary key.
   • CUsing the ORM's built-in query builder with parameters.
   • DUsing the ORM's save() method with validated data.
   Reveal Solution Discussion Select an answer first
6. 80application · medium

   A web application has a login form that builds a SQL query by concatenating the username and password fields directly into the WHERE clause. During a penetration test, an analyst submits the following as the username: ' OR '1'='1' -- and any password. The analyst successfully logs in as the first user in the database. Which remediation would most directly prevent this specific bypass while preserving the application's functionality?

   • AEnforce a strong password policy for all users
   • BAdd a web application firewall rule to block requests containing the string ' OR '
   • CHash the password before including it in the query
   • DUse parameterized queries for the authentication query
   Reveal Solution Discussion Select an answer first