Acquia Exam Acquia-Certified-Site-Builder-D8 Topic 8 Question 68 Discussion

Actual exam question for Acquia's Acquia-Certified-Site-Builder-D8 exam

Question #: 68
Topic #: 8

[All Acquia-Certified-Site-Builder-D8 Questions]

Your Drupal site contains a contact form for anonymous users, with the following fields: subject (text plain), name (text plain), email (Email), message (text long), attachment (file)

All fields are without any restrictions and none is mandatory to send the form

What is the potential security threat with this form1?

AThere are no issues with this form

BAnonymous users should not have access to forms.

CAnonymous users can upload corrupted or virus-infected files to your server

DPutting a very long text into the message field, may timeout the form submit and open up options for DDoS attacks

Show Suggested Answer

Suggested Answer: B

by Renea at Jun 21, 2024, 01:21 AM

Limited Time Offer

25%

Off

Get Premium Acquia-Certified-Site-Builder-D8 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Sheron

4 months ago

I think we should make some fields mandatory to prevent security threats.

upvoted 0 times

...

Vernell

4 months ago

I believe putting a very long text into the message field can also be a security threat.

upvoted 0 times

...

Antonette

4 months ago

I agree with Virgina, allowing anonymous users to upload files can be risky.

upvoted 0 times

...

Candida

4 months ago

Haha, option D is pure comedy gold. Imagine a hacker just spamming your server with super long messages. That's a new take on the DDoS attack!

upvoted 0 times

Lovetta

4 months ago

Tien: Agreed, we need to tighten up the security on our contact form.

upvoted 0 times

...

Lauran

4 months ago

We should definitely put some restrictions on the message field to prevent that.

upvoted 0 times

...

Tien

4 months ago

It's scary to think about how easily someone could take down a site with just long messages.

upvoted 0 times

...

Pearly

4 months ago

Yeah, that would definitely be a creative way to launch a DDoS attack.

upvoted 0 times

...

Virgina

4 months ago

I think the potential security threat is that anonymous users can upload corrupted files.

upvoted 0 times

...

Haydee

5 months ago

I dunno, maybe option B is the way to go. Anonymous users shouldn't even be able to access a contact form in the first place. Seems like a recipe for disaster.

upvoted 0 times

...