Web Application Injection Attacks GCIH Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A C application logs user-provided messages using the code: printf(user_message). A security tester submits a message containing %x %x %x and observes that the application outputs memory addresses from the stack. Which remediation would most directly prevent this format string vulnerability?

   • AUse a larger buffer to store the user message
   • BSanitize the user message by removing all percent signs
   • CEnable compiler warnings and ignore them
   • DChange the code to printf("%s", user_message)
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary defense against LDAP injection?

   • ADisabling LDAP authentication and using only SQL databases.
   • BUsing a blacklist of dangerous LDAP characters.
   • CEscaping special LDAP characters in user input before constructing queries.
   • DUsing a web application firewall to block LDAP requests.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is the most effective defense against SQL injection?

   • AEscaping single quotes in user input before concatenating into SQL.
   • BUsing parameterized queries (prepared statements) for all database access.
   • CUsing a web application firewall (WAF) to block malicious requests.
   • DStoring all user input in a separate table to isolate it from queries.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A company is deploying a new web application that handles sensitive data. The security team wants to implement a comprehensive defense-in-depth strategy against all injection types. They have budget constraints and need to prioritize controls. Which combination of controls provides the most effective defense?

   • AInput validation, output encoding, least privilege, and a web application firewall (WAF)
   • BOnly input validation and output encoding
   • COnly a web application firewall (WAF)
   • DOnly least privilege and a WAF
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A Node.js application uses MongoDB and allows users to search for products by name. The search query is built as: db.products.find({ name: req.query.name }). A security review finds that sending ?name[$regex]=.*admin.* returns products with 'admin' in the name, which is not the intended behavior. The application must support partial string matching. Which remediation would be most secure?

   • ABlock any input containing the '$' character
   • BUse a text index and MongoDB's $text search operator
   • CValidate that the input is a string and use a safe regex construction with escaped user input
   • DUse the find() method with a callback to filter results in JavaScript
   Reveal Solution Discussion Select an answer first