Questão 76 — CompTIA SY0-701 CompTIA Security+ Certification Exam
A penetration testing report indicated that an organization should implement controls related to database input validation. Which of the following best identifies the type of vulnerability that was likely discovered during the test?
- A. XSS
- B. Command injection
- C. Buffer overflow
- D. SQLi
Resposta correta:
D
Explicação
Explanation: Correct answer: D. SQLi Poor input validation in databases typically leads to SQL Injection (SQLi) vulnerabilities, where attackers manipulate input fields to execute arbitrary SQL commands and gain unauthorized data access or control. XSS (A) affects web applications' output rendering, command injection (B) affects OS commands, and buffer overflow (C) affects memory management, so they don't directly relate to database input validation. SQLi is a critical vulnerability extensively covered in the Application Security domain6:Chapter 6CompTIA Security+ Study Guide.
Quer todas as 907 questões por R$ 1,00?