XML Exam I10-003 Topic 6 Question 47 Discussion

Actual exam question for XML's I10-003 exam

Question #: 47
Topic #: 6

See separate window.

A certain Web application displays user information according to user input via Web browser. The XML data managing user information is as shown in [example.xml] (separate window). The following [XQuery] is executed when the Web application retrieves user information from [example xml].

[XQuery]

{

fn:doc("example.xml")//data[userid = "(1)"][password = "(2)"]

}

At this time, the Web application completes the [XQuery] by replacing (1) and (2) with the user input character string, and executes the query.

No character escapes (e.g. convert "<" to "<") are performed for character string input by the user. Select two of the following that produces the query execution result in [Execution Result] (separate window) when the character string is as shown in each answer choice.

A(1) ' or''='
(2) OK

B(1) ' or''='
(2) ' or''='

C(1) idorfn:true()
(2) OK

D(1) idorfn.true()
(2) idorfn:true()

E(1) ' or fn:true() or any='
(2) OK

F(1) 'or fn:true() or any='
(2) 'or fn:true() or any='

Show Suggested Answer

Suggested Answer: B, F

by Jolene at Aug 06, 2024, 08:00 AM

Limited Time Offer

25%

Off

Get Premium I10-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alton

5 months ago

I think C might be the correct answer based on the XQuery provided.

upvoted 0 times

...

Nilsa

6 months ago

Ooh, this is juicy! I can practically smell the security vulnerability from here. Let's see what trouble we can stir up!

upvoted 0 times

...

Mauricio

6 months ago

Ha! 'Character escapes'? What is this, a magic trick? I'm going to go with my gut on this one.

upvoted 0 times

Bernardo

5 months ago

B: Yeah, that sounds like a good choice. Let's go with that.

upvoted 0 times

...

Reena

5 months ago

Option E seems like the best choice to me.

upvoted 0 times

...

Oliva

5 months ago

A: I think it's A) (1) \' or\'\'=\' (2) OK

upvoted 0 times

...

Rutha

5 months ago

I'm leaning towards option B.

upvoted 0 times

...

Peggy

6 months ago

I think I'll go with option A.

upvoted 0 times

...

Laurena

6 months ago

But A seems to match the query execution result in the example.

upvoted 0 times

...

Filiberto

6 months ago

I disagree, I believe the correct answer is B.

upvoted 0 times

...

Laurena

6 months ago

I think the answer is A.

upvoted 0 times

...

Malinda

6 months ago

I think C might also be a valid option based on the XQuery provided.

upvoted 0 times

...

Rosann

6 months ago

But A seems to match the query execution result in the example.

upvoted 0 times

...

Noah

6 months ago

Alright, let's see... I bet the answer has something to do with SQL injection. Time to put my hacking skills to the test!

upvoted 0 times

Louvenia

5 months ago

B: Agreed. Let's analyze the options before making our selection.

upvoted 0 times

...

Juan

5 months ago

A: I think it has to do with SQL injection. Let's choose carefully.

upvoted 0 times

...

Iluminada

6 months ago

B: Yeah, I saw it. Looks like we need to select the answer choices that produce the query execution result.

upvoted 0 times

...

Lorriane

6 months ago

A: Hey, have you checked out the question about the Web application and XQuery?

upvoted 0 times

...

Elena

6 months ago

B: Yeah, that looks like it could be the right choice. Let's go with that.

upvoted 0 times

...

Raina

6 months ago

A: I think the answer is A) (1) \' or\'\'=\' (2) OK

upvoted 0 times

...

Marya

6 months ago

I disagree, I believe the correct answer is B.

upvoted 0 times

...

Rosann

7 months ago

I think the correct answer is A.

upvoted 0 times

...

Ashleigh

7 months ago

Wow, this question is a real challenge! I'll need to really think this through carefully.

upvoted 0 times

Dierdre

6 months ago

D) (1) idorfn.true() (2) idorfn:true()

upvoted 0 times

...

Geraldo

6 months ago

C) (1) idorfn:true() (2) OK

upvoted 0 times

...

Ciara

6 months ago

B) (1) \' or\'\'=\' (2) \' or\'\'=\'

upvoted 0 times

...

Solange

7 months ago

A) (1) \' or\'\'=\' (2) OK

upvoted 0 times

...