GIAC Exam GISF Topic 3 Question 67 Discussion

Actual exam question for GIAC's GISF exam

Question #: 67
Topic #: 3

[All GISF Questions]

Web applications play a vital role in deploying different databases with user accessibility on theInternet. Which of the following allows an attacker to get unauthorized access to the database of aWeb application by sending (attacking) user-supplied data to an interpreter as part of a commandor query

AInjection flaw

BMalicious File Execution

CCross Site Request Forgery (CSRF)

DCross Site Scripting

Show Suggested Answer

Suggested Answer: C

by Youlanda at Feb 06, 2025, 05:27 PM

Limited Time Offer

25%

Off

Get Premium GISF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Skye

2 months ago

Injection flaw? More like 'Injection Flawless'! Am I right, folks? Seriously though, this one's a no-brainer. Gotta keep those databases secure!

upvoted 0 times

Joesph

15 days ago

B) Malicious File Execution

upvoted 0 times

...

Tomas

25 days ago

Definitely! Injection flaws are a major vulnerability that attackers can exploit to access databases.

upvoted 0 times

...

Maryrose

1 months ago

A) Injection flaw

upvoted 0 times

...

Whitney

2 months ago

Cross Site Scripting? That's about injecting malicious scripts into web pages, not directly attacking the database. Injection flaw is the clear winner here.

upvoted 0 times

...

Eladia

2 months ago

Malicious File Execution? That's when an attacker tries to run their own program on the server. Not what this question is asking about. Injection flaw is the way to go!

upvoted 0 times

Julian

9 days ago

No, that's not the correct option for this scenario.

upvoted 0 times

...

Shawn

19 days ago

B) Malicious File Execution

upvoted 0 times

...

Talia

30 days ago

Exactly! Injection flaw allows an attacker to send user-supplied data to a database interpreter.

upvoted 0 times

...

Merri

1 months ago

A) Injection flaw

upvoted 0 times

...

Ollie

2 months ago

Cross Site Request Forgery? Nah, that's more about tricking users into performing unwanted actions on the website. This question is about getting unauthorized access to the database, so it's gotta be injection flaw.

upvoted 0 times

Isidra

30 days ago

Yeah, injection flaw allows attackers to send user-supplied data to the interpreter to access the database.

upvoted 0 times

...

Amina

1 months ago

I agree, injection flaw is the correct answer.

upvoted 0 times

...

Marnie

2 months ago

Injection flaw? That's the one! I remember learning about how attackers can sneak malicious code into user inputs and trick the application into executing it. Gotta watch out for those sneaky SQL injection attacks!

upvoted 0 times

...