BlackFriday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Acquia Exam Acquia-Certified-Site-Builder-D8 Topic 4 Question 72 Discussion

Actual exam question for Acquia's Acquia-Certified-Site-Builder-D8 exam
Question #: 72
Topic #: 4
[All Acquia-Certified-Site-Builder-D8 Questions]

Your Drupal site contains a contact form for anonymous users, with the following fields: subject (text plain), name (text plain), email (Email), message (text long), attachment (file)

All fields are without any restrictions and none is mandatory to send the form

What is the potential security threat with this form1?

Show Suggested Answer Hide Answer
Suggested Answer: B

Contribute your Thoughts:

Lashandra
2 months ago
Yes, Justine, option D could also be exploited for DDoS attacks.
upvoted 0 times
...
Mammie
3 months ago
B makes the most sense to me. Anonymous users shouldn't have access to forms at all. It's just asking for trouble. Keep that stuff locked down tight, I say.
upvoted 0 times
...
Justine
3 months ago
But what about option D? Could that also be a security concern?
upvoted 0 times
...
Kathrine
3 months ago
Haha, this question is like a bad joke. Anonymous users with a file upload field? That's like leaving the front door wide open and saying 'come on in, hackers!'
upvoted 0 times
Malcolm
2 months ago
B) Anonymous users should not have access to forms.
upvoted 0 times
...
Jordan
2 months ago
C) Anonymous users can upload corrupted or virus-infected files to your server
upvoted 0 times
...
Izetta
2 months ago
A) There are no issues with this form
upvoted 0 times
...
Bobbye
2 months ago
D) Putting a very long text into the message field, may timeout the form submit and open up options for DDoS attacks
upvoted 0 times
...
Judy
2 months ago
B) Anonymous users should not have access to forms.
upvoted 0 times
...
Asuncion
3 months ago
C) Anonymous users can upload corrupted or virus-infected files to your server
upvoted 0 times
...
Quiana
3 months ago
A) There are no issues with this form
upvoted 0 times
...
...
Elise
3 months ago
I agree with Lashandra, allowing anonymous users to upload files can be risky.
upvoted 0 times
...
Lashandra
3 months ago
I think option C is the potential security threat.
upvoted 0 times
...
Oren
3 months ago
D, all the way! A long message field? That's a disaster waiting to happen. Timeout the form and open up the site to DDoS? Yikes, no thank you!
upvoted 0 times
Marta
2 months ago
B) Anonymous users should not have access to forms.
upvoted 0 times
...
Franklyn
2 months ago
C) Anonymous users can upload corrupted or virus-infected files to your server
upvoted 0 times
...
Lavera
2 months ago
D) Putting a very long text into the message field, may timeout the form submit and open up options for DDoS attacks
upvoted 0 times
...
Sherron
3 months ago
D, all the way! A long message field? That's a disaster waiting to happen.
upvoted 0 times
...
Lavera
3 months ago
C) Anonymous users can upload corrupted or virus-infected files to your server
upvoted 0 times
...
...
Shizue
4 months ago
Hmm, I don't know about that. A seems pretty reasonable to me. As long as the fields are just plain text, what could go wrong, right? Oh, wait, you said 'attachment'? Nevermind, C is the clear choice here.
upvoted 0 times
...
Viola
4 months ago
Whoa, that's a tricky one! I'd say C is the way to go - letting anonymous users upload files? That's just asking for trouble. Hackers could have a field day with that one.
upvoted 0 times
Buddy
2 months ago
A) There are no issues with this form
upvoted 0 times
...
Halina
2 months ago
That's a good point, allowing anonymous users to upload files can definitely pose a security risk.
upvoted 0 times
...
Audry
3 months ago
B) Anonymous users should not have access to forms.
upvoted 0 times
...
Jeannine
3 months ago
C) Anonymous users can upload corrupted or virus-infected files to your server
upvoted 0 times
...
...

Save Cancel