Eccouncil Exam ECSAv10 Topic 4 Question 67 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 67
Topic #: 4

An attacker injects malicious query strings in user input fields to bypass web service authentication mechanisms and to access back-end databases. Which of the following attacks is this?

AFrame Injection Attack

BLDAP Injection Attack

CXPath Injection Attack

DSOAP Injection Attack

Show Suggested Answer

Suggested Answer: D

by Aracelis at Apr 21, 2024, 04:06 AM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Billye

6 months ago

True, Frame Injection Attack is more about manipulating visuals on a webpage.

upvoted 0 times

...

Carin

7 months ago

Eve: I'm not sure but I think we can rule out A) Frame Injection Attack, it doesn't seem relevant to the scenario.

upvoted 0 times

...

Rosalind

7 months ago

David: I believe D) SOAP Injection Attack is also a possibility, as it targets web services.

upvoted 0 times

...

Erick

7 months ago

I think it could also be C) XPath Injection Attack, since it's another way to manipulate queries.

upvoted 0 times

...

Emilio

7 months ago

I agree with LDAP Injection Attack is common for bypassing authentication mechanisms.

upvoted 0 times

...

Rosann

7 months ago

I think the answer is B) LDAP Injection Attack.

upvoted 0 times

...

Juan

8 months ago

I agree, the attacker is trying to manipulate LDAP queries

upvoted 0 times

...

Glory

8 months ago

I think it's B) LDAP Injection Attack

upvoted 0 times

...