Web Application Injection Attacks GCIH Practice Questions (Page 7)

Questions 31–35

1. 31expert · hard

   An incident responder is investigating a suspected SQL injection attack on a web application. The application logs show the following query: `SELECT * FROM products WHERE category = 'Gifts' OR '1'='1'`. The responder wants to confirm the attack and determine the impact. Which action is most appropriate?

   • AReview the application logs for other similar queries and check for data exfiltration patterns
   • BImmediately shut down the database server to prevent further damage
   • CRun the query manually to see if it returns data
   • DIgnore the log entry because it is likely a false positive
   Reveal Solution Discussion Select an answer first
2. 32application · medium

   An application uses XPath to retrieve user profiles from an XML document: //user[username/text()='USER' and password/text()='PASS']/profile. A tester submits the username ' or '1'='1 and a blank password, and the application returns the profile of the first user. Which remediation would most effectively prevent this XPath injection?

   • AEscape single quotes in the username and password before building the XPath expression
   • BValidate that the username contains only letters and numbers
   • CUse a DOM parser to parse the XML instead of an XPath query
   • DParameterize the XPath query using a library that supports variables
   Reveal Solution Discussion Select an answer first
4. 33foundation · easy

   What is the best defense against XPath injection?

   • AUsing a web application firewall to block XPath requests.
   • BUsing parameterized XPath queries and validating user input.
   • CDisabling XPath and using only SQL.
   • DBlacklisting dangerous XPath characters like ' and ".
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   How can an attacker bypass authentication in a MongoDB application using NoSQL injection?

   • ABy sending a large payload to cause a buffer overflow.
   • BBy submitting a SQL UNION query in the username field.
   • CBy submitting a JSON payload like {"username": {"$ne": null}, "password": {"$ne": null}}.
   • DBy using an XML external entity in the password field.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A security team is reviewing an application that processes XML files. They want to prevent XXE attacks. Which configuration change is most effective?

   • ADisable external entity resolution in the XML parser
   • BUse a WAF to block XML payloads containing `<!DOCTYPE`
   • CSanitize user input by removing all angle brackets
   • DValidate XML input against a strict schema
   Reveal Solution Discussion Select an answer first