Eccouncil Exam ECSAv10 Topic 6 Question 72 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 72
Topic #: 6

An attacker injects malicious query strings in user input fields to bypass web service authentication mechanisms and to access back-end databases. Which of the following attacks is this?

AFrame Injection Attack

BLDAP Injection Attack

CXPath Injection Attack

DSOAP Injection Attack

Show Suggested Answer

Suggested Answer: D

by Nickolas at Jun 18, 2024, 08:55 PM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lemuel

5 months ago

Because XPath Injection Attack is used to exploit vulnerabilities in XML-based applications, which sounds like what the attacker is doing.

upvoted 0 times

...

Joye

5 months ago

I'm tempted to go with the 'Frame Injection Attack' option, just to see the look on the examiner's face. But seriously, this is textbook SQL Injection. Option C is the way to go.

upvoted 0 times

...

Tamekia

5 months ago

Haha, SOAP Injection? What is this, 2005? Nah, man, this is SQL all the way. I bet the answer is B, just to throw us off, but I'm sticking with C.

upvoted 0 times

...

Lorrie

5 months ago

Why do you think it's XPath Injection Attack?

upvoted 0 times

...

Caprice

5 months ago

XPath Injection? Really? That's just ridiculous. This is clearly a SQL Injection attempt. I hope the correct answer is C, because that's what I'm going with.

upvoted 0 times

Skye

4 months ago

Well, let's see what the correct answer is.

upvoted 0 times

...

Misty

4 months ago

But SQL Injection is more common and dangerous.

upvoted 0 times

...

Amira

4 months ago

No, it's actually XPath Injection. It's a type of injection attack.

upvoted 0 times

...

Fausto

4 months ago

I think it's SQL Injection too. It's a common attack.

upvoted 0 times

...

Ruthann

5 months ago

SQL Injection, no doubt about it. I've seen this kind of attack before, and it's a real pain to defend against. Gotta be careful with all that user input!

upvoted 0 times

Justine

4 months ago

Yeah, it's important to sanitize all user input to prevent these kinds of attacks. Better safe than sorry!

upvoted 0 times

...

Ling

5 months ago

SQL Injection attacks are no joke. They can really mess up a system if not properly protected against.

upvoted 0 times

...

Lemuel

5 months ago

I disagree, I believe it is C) XPath Injection Attack.

upvoted 0 times

...

Wynell

6 months ago

I think this is a classic SQL Injection attack. The attacker is trying to manipulate the database through malicious query strings. Option A is definitely not correct.

upvoted 0 times

Adelina

5 months ago

Option C) XPath Injection Attack

upvoted 0 times

...

Clarence

5 months ago

Option B) LDAP Injection Attack

upvoted 0 times

...

Lorrie

6 months ago

I think the answer is B) LDAP Injection Attack.

upvoted 0 times

...