Exam 350-701 topic 1 question 623 discussion

On the Exam, Choose B and D, I don't see any reference to Answer A (External Entity Injection) in the official material, but I do for Answers B and D. /shrug, awful question

Another bad question from Cisco. more elaboration is needed for the question. If the question read specifically "Two Examples of Server Side Injection" then A and D are 100% correct as Cross-Site is Client Side. awful question because the answer here very well could be B and D if you put your blinders on to anything outside of Cisco material. The type of questions that make me feel like this exam truly is meant to brainwash you instead of test your knowledge.

Xss, SQL injections

Code injection vulnerabilities occur when an attacker is able to insert and execute malicious code into a program or query. Here’s how the correct examples fit: XML External Entity (XXE) Injection (A): This occurs when an application processes XML input containing a reference to an external entity. Attackers can exploit XXE vulnerabilities to extract sensitive data, perform denial of service (DoS), or execute remote requests. SQL Injection (D): In this attack, an attacker inserts malicious SQL statements into an input field to manipulate the database. SQL injection can lead to unauthorized access to sensitive data, database corruption, or even full system compromise.