Eccouncil Exam ECSAv10 Topic 6 Question 76 Discussion

Actual exam question for Eccouncil's ECSAv10 exam

Question #: 76
Topic #: 6

An attacker injects malicious query strings in user input fields to bypass web service authentication mechanisms and to access back-end databases. Which of the following attacks is this?

AFrame Injection Attack

BLDAP Injection Attack

CXPath Injection Attack

DSOAP Injection Attack

Show Suggested Answer

Suggested Answer: D

by Kathrine at Aug 03, 2024, 10:53 AM

Limited Time Offer

25%

Off

Get Premium ECSAv10 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Marge

3 months ago

Because XPath Injection Attack involves injecting malicious queries to access back-end databases, just like in this scenario.

upvoted 0 times

...

Lorriane

3 months ago

Ha, LDAP Injection? What is this, the 90s? SQL Injection all the way, my dude.

upvoted 0 times

...

Graciela

4 months ago

Hmm, I'm not sure about this one. Frame Injection? That doesn't really fit the description. I'd go with C, XPath Injection.

upvoted 0 times

...

Ayesha

4 months ago

SOAP Injection, huh? I guess that could work, but it seems a bit too specific. SQL Injection feels like a more generic and common attack vector.

upvoted 0 times

Pearly

2 months ago

C) XPath Injection Attack

upvoted 0 times

...

Lisha

2 months ago

SQL Injection is indeed a common attack, but in this case, the attacker is injecting malicious query strings to bypass authentication mechanisms.

upvoted 0 times

...

Gilma

2 months ago

D) SOAP Injection Attack

upvoted 0 times

...

Teresita

2 months ago

B) LDAP Injection Attack

upvoted 0 times

...

Erinn

2 months ago

C) XPath Injection Attack

upvoted 0 times

...

Howard

3 months ago

A) Frame Injection Attack

upvoted 0 times

...

Mohammad

4 months ago

XPath Injection, definitely. That's the one where you can access sensitive data in the back-end database, right?

upvoted 0 times

...

Sue

4 months ago

This sounds like a classic SQL Injection attack to me. I've seen this one before, and it's a nasty one.

upvoted 0 times

Yolande

3 months ago

D) SOAP Injection Attack

upvoted 0 times

...

Anjelica

3 months ago

C) XPath Injection Attack

upvoted 0 times

...

Pete

3 months ago

B) LDAP Injection Attack

upvoted 0 times

...

Roslyn

3 months ago

A) Frame Injection Attack

upvoted 0 times

...

Lili

4 months ago

Why do you think it's XPath Injection Attack?

upvoted 0 times

...

Marge

4 months ago

I disagree, I believe it's C) XPath Injection Attack.

upvoted 0 times

...

Lili

4 months ago

I think the answer is B) LDAP Injection Attack.

upvoted 0 times

...