Exam PT0-001 topic 1 question 66 discussion

there are incorrect answers here I think the right answers is: 1. DOM XSS - Input Sanitization (<> ...) 2. Sql Injection Stacked - Parameterized Queries 3. Reflected XSS - Input sanitization (<> ...) 4. Local File Inclusion - sandbox req 5. Command Injection - sandbox req 6. SQLi union - paramtrized queries 7. SQLi error - paramtrized queries 8. Remote File Inclusion - sandbox 9. Command Injection - input saniti $ 10. URL redirect - prevent external calls

The correct answer is: 1. Reflected XSS - Input sanitization (<> ...) 2. Sql Injection Stacked - Parameterized Queries 3. DOM XSS - Input Sanitization (<> ...) 4. Local File Inclusion - sandbox req 5. Command Injection - sandbox req 6. SQLi union - paramtrized queries 7. SQLi error - paramtrized queries 8. Remote File Inclusion - sandbox 9. Command Injection - input saniti $ 10. URL redirect - prevent external calls

1. #inner-tab" Reflected Cross Site Scripting Input Sanitization ", ', <, :, >, - 2. item=widge;waitfor SQL Injection (Stacked) Parameterized Queries 3. item=widget%20union SQL Injection (Union) Parameterized Queries 4. search=Bob DOM-based Cross Site Scripting Input Sanitization ", ', <, :, >, - 5. widget'+conver SQL Injection (Error) Parameterized Queries 6. www.exe'ping Command Injection Input Sanitization ", ', <, :, >, - 7. malicious-site URL Redirect Prevent External calls 8. fetc%2fpasswd Local File Inclusion Input Sanitization ..., \ ,/ , sandbox requests 9.lookup Command Injection Input Sanitization ; :, $,{,}(,), 10. logFile=http Remote File Inclusion Input Sanitization ..., \ ,/ , sandbox requests

1. Reflected Cross Site Scripting Input Sanitization ", ', <, :, >, - 2. SQL Injection (Stacked) Parameterized Queries 3. SQL Injection (Union) Parameterized Queries 4. DOM-based Cross Site Scripting Input Sanitization ", ', <, :, >, - 5. SQL Injection (Error) Parameterized Queries 6. Command Injection Input Sanitization ", ', <, :, >, - 7. URL Redirect Prevent External calls 8. Local File Inclusion Input Sanitization ..., \ ,/ , sandbox requests 9. Command Injection Input Sanitization ; :, $,{,}(,), 10. logFile=http Remote File Inclusion Input Sanitization ..., \ ,/ , sandbox requests

It was on the exam

This exact question was on the exam!

For SQL injection the BEST remediation will always be parameterized Queries . For command injection it will be input sanitization for XSS it will always be input sanitization with <,> due to the nature of XSS commands that involve <>. SO redir=http:%2f%2fwww.malicious-site.com this is a URL redirect and the remediation is preventing external calls 100% Sure. On this lookup=$(whoami) this is command injection and the remediation is input sanitization ",$,(.),(.). The one with the $. 100% sure on this one too item=widget'+ convert(int, @@version)+' This is SQL injection error based the error comes from the converting of the integer in the brackets which forces an error. As you know INT is a type for data in SQL . As i said for SQL the BEST solution is parameterized queries. 100% sure on this. You can type the command in google and it will show up as an example , took a lot of google searching but it's there. item=widget%20union ........ The union is a dead giveaway so, SQL injection (union) Remediation is Parameterized Queries

ikot versun. tp yg 1 ngan 3 tu teka je DOM. Cohort 1-2021

1. DOM - Input Sanitization (last) 2. Sql Injection Stacked - Parameterized Queries 3. Reflected - Input sanitization(last) 4. LFI - sandbox req 5. CI - sandbox req 6. union - para query 7. SQL error - param que 8. RFI - sandbox 9. CI - input saniti $ 10. URL redirect - prevent external calls

x0hmei , so wot da heck is right order,

Anyone sure of the RIGHT order, im LOST

no half those are wrong