ExamTopics Logo
Mail Us[email protected]
Menu
Comptia Discussions
exam questions

Exam CS0-003 All Questions

View all questions & answers for the CS0-003 exam
Go to Exam

Exam CS0-003 topic 1 question 169 discussion

Actual exam question from CompTIA's CS0-003
Question #: 169
Topic #: 1
[All CS0-003 Questions]

A penetration tester is conducting a test on an organization's software development website. The penetration tester sends the following request to the web interface:



Which of the following exploits is most likely being attempted?

  • A. SQL injection
  • B. Local file inclusion
  • C. Cross-site scripting
  • D. Directory traversal
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by [deleted] at Feb. 22, 2024, 10:31 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
[Removed]
Highly Voted 1 year, 2 months ago
The UNION statement makes this easily an SQL injection, other identifiers could be single ', 1= 1, logs that contain null, null fields etc.
upvoted 11 times
...
Sgthud
Highly Voted 9 months ago
I had this question. I had recognized a few questions and maybe 3 simulations questions. using this helped me out a lot.
upvoted 11 times
...
Serac
Most Recent 7 months ago
Selected Answer: A
With “UNION” and “SELECT” it can’t be anything else.
upvoted 3 times
...
maggie22
1 year, 1 month ago
Answer A explaination https://portswigger.net/support/using-burp-to-exploit-sql-injection-vulnerabilities-the-union-operator
upvoted 6 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago