Web Application Injection Attacks GCIH Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is a potential impact of HTTP response splitting?

   • AAn attacker can inject a second response body, leading to XSS or cache poisoning.
   • BIt allows command injection into the OS.
   • CIt allows SQL injection into the database.
   • DIt causes a buffer overflow in the web server.
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   Which code snippet is most vulnerable to SQL injection?

   • Acursor.execute(f"SELECT * FROM users WHERE username = '{username}'")
   • Bcursor.execute("SELECT * FROM users WHERE username = %s", (username,))
   • Ccursor.execute("SELECT * FROM users WHERE username = ?", (username,))
   • Dcursor.callproc('get_user', [username])
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A Django application uses the ORM to query a PostgreSQL database. A developer needs to implement a search feature that allows users to filter records by a dynamic set of columns and values. The developer is concerned about ORM injection. Which approach would be the most secure while allowing dynamic filtering?

   • AUse the extra() method with the user-supplied where clause
   • BUse raw SQL with string formatting for the column names and values
   • CUse the values() method with the user-supplied field names
   • DUse the ORM's Q objects with parameterized values and validate the column names against an allowlist
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which compiler warning can help detect format string vulnerabilities?

   • AWarnings about implicit function declarations.
   • BWarnings about unused variables.
   • CWarnings about non-literal format strings (e.g., -Wformat-security in GCC).
   • DWarnings about integer overflow.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Why is input validation important in preventing NoSQL injection?

   • AIt ensures that user input matches expected data types and formats, rejecting malicious operators.
   • BIt logs all user input for auditing.
   • CIt encodes user input in base64 to prevent injection.
   • DIt allows all input but escapes dangerous characters.
   Reveal Solution Discussion Select an answer first