Which defense strategy is most directly effective in preventing SQL injection attacks?

Implementing a Web Application Firewall (WAF) that blocks all requests containing the word 'SELECT'.

Disabling client-side JavaScript to prevent malicious input.

Using input validation that only allows alphanumeric characters in all fields.

Using parameterized queries (prepared statements) with bound parameters.

A security team is responding to an incident where an attacker exploited a SQL injection vulnerability in a public-facing web application. The application is business-critical and cannot be taken offline. The team has identified the vulnerable query and is considering immediate mitigation options. Which of the following is the most appropriate immediate action?

Deploy a WAF rule to block the specific injection pattern while the code fix is developed

Disable the database account used by the application

Take the application offline and apply the code fix immediately

Increase the database logging level to capture more attack details

A security analyst is reviewing a vulnerability scan report for a web application. The report indicates that the application is vulnerable to cross-site scripting (XSS) in a search field. The analyst wants to confirm the vulnerability and assess the impact. Which of the following is the most appropriate next step?

Block the search feature in the web application firewall (WAF)

Inject a harmless script that displays an alert box to confirm the XSS

Immediately patch the application with the latest vendor update

Review the application's source code to identify the vulnerable function

GIAC Defending Advanced Threats

Domain 1Objective 3

Application Exploitation GDAT Practice Questions (Page 6)

Part of the Initial Access and Execution domain, which makes up ~29% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–23 in this domain), expect 5–8 from this objective — we provide 44 practice questions to prepare you well beyond it. (estimate)

44questions here

9free pages

4concepts

Questions 26–30

26expert · hard
A security analyst is investigating a series of attacks against a web application. The application uses a NoSQL database. The analyst notices that the application is vulnerable to injection attacks that manipulate database queries by sending JSON objects with special operators like $gt and $ne. Which vulnerability class is being exploited?
Select an answer first
27foundation · easy
Which defense strategy is most directly effective in preventing SQL injection attacks?
Select an answer first
28expert · hard
A security team is responding to an incident where an attacker exploited a SQL injection vulnerability in a public-facing web application. The application is business-critical and cannot be taken offline. The team has identified the vulnerable query and is considering immediate mitigation options. Which of the following is the most appropriate immediate action?
Select an answer first
29application · medium
A security analyst is reviewing a vulnerability scan report for a web application. The report indicates that the application is vulnerable to cross-site scripting (XSS) in a search field. The analyst wants to confirm the vulnerability and assess the impact. Which of the following is the most appropriate next step?
Select an answer first
30foundation · easy
Which vulnerability class is characterized by an application using unsanitized user input to construct an operating system command that is then executed by the server?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GDAT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GDAT” is a trademark of its owner, used for identification only.

Application Exploitation GDAT Practice Questions (Page 6)

Questions 26–30

Which defense strategy is most directly effective in preventing SQL injection attacks?

Which vulnerability class is characterized by an application using unsanitized user input to construct an operating system command that is then executed by the server?

Keep studying — Initial Access and Execution