Code Interaction with Environment

Multiple Choice

What is P.C.I.?

• Payment Card Interface

• Payment Card Inquiry

• Payment Card Industry

• Payment Conversion Industry

Multiple Choice

Which of the following best describes a SQL Injection attack?

• An attack that exploits weak database indexing to slow down query execution and cause denial of service

• An attack where unauthorized SQL commands are inserted into a query via input fields, exploiting improper input sanitization

• A method of encrypting SQL queries so they are not readable during transit between client and server

• A technique used by administrators to dynamically update SQL views without user authentication

Multiple Choice

Which of the following is not typically considered sensitive data in the context of information security?

• Social Security Number (SSN)

• Medical Records

• IP Address

• Email

Multiple Choice

Which of the following error messages is an example of improper error handling that could leak sensitive system information to an attacker?

• Invalid credentials. Please try again.

• Unexpected error occurred. Contact administrator at [e-mail]

• ORA-00933: SQL command not properly ended.

• Session expired. Please log in again.

Multiple Choice

Select the attack that is not considered a type of injection vulnerability:

• SQL Injection

• XSS Attack

• Man-in-the-Middle (MITM) Injection

• Log Injection