How can email header injection be used for phishing?

By injecting SQL to extract user credentials.

By injecting a Bcc header to send copies of the email to attackers without the recipient's knowledge.

By injecting a buffer overflow to execute code.

By injecting XML to read files.

What does DEP (Data Execution Prevention) do?

It adds a canary value to detect buffer overflows.

It randomizes memory addresses to prevent exploitation.

It marks memory pages as non-executable, preventing code execution from data areas like the stack or heap.

It encrypts the stack to prevent tampering.

A team is refactoring an application that uses an ORM. They want to prevent ORM injection. Which coding practice is most effective?

Use the ORM's query builder methods with parameter binding instead of raw SQL strings

Use raw SQL queries but escape user input manually

Disable the ORM and use stored procedures exclusively

Add a WAF to block ORM injection attempts

What is the purpose of input allowlisting in preventing command injection?

To allow all characters except a few dangerous ones.

To log all user input for auditing purposes.

To ensure that only expected characters or values are accepted, blocking shell metacharacters.

To encode user input in base64 before passing to the shell.

GIAC Certified Incident Handler

Domain 3Objective 3

Web Application Injection Attacks GCIH Practice Questions (Page 9)

Part of the Web Application Security domain, which makes up ~25% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 240-minute exam (~95–160 total, ~24–40 in this domain), expect 8–13 from this objective — we provide 80 practice questions to prepare you well beyond it. (estimate)

80questions here

16free pages

25concepts

25 Concepts in This Objective

SQL Injection Fundamentals
SQL Injection Attack Techniques
SQL Injection Mitigation
Command Injection
Command Injection Mitigation
LDAP Injection
LDAP Injection Mitigation
XML Injection
XML Injection Mitigation
NoSQL Injection
NoSQL Injection Mitigation
ORM Injection
ORM Injection Mitigation
XPath Injection
XPath Injection Mitigation
Buffer Overflow Injection
Buffer Overflow Mitigation
Format String Injection
Format String Mitigation
HTTP Header Injection
HTTP Header Injection Mitigation
Email Header Injection
Email Header Injection Mitigation
Injection Attack Detection and Testing
Injection Attack Defense in Depth

Questions 41–45

41expert · hard
A developer is using an ORM in a Java application and writes the following code: `Query q = em.createQuery("SELECT u FROM User u WHERE u.username = '" + userInput + "'");`. An attacker wants to bypass authentication. Which payload would achieve this?
Select an answer first
42foundation · easy
How can email header injection be used for phishing?
Select an answer first
43foundation · easy
What does DEP (Data Execution Prevention) do?
Select an answer first
44application · medium
A team is refactoring an application that uses an ORM. They want to prevent ORM injection. Which coding practice is most effective?
Select an answer first
45foundation · easy
What is the purpose of input allowlisting in preventing command injection?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCIH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCIH” is a trademark of its owner, used for identification only.