A Recently Concluded Penetration Test Revealed That a Legacy Web

question 135

Multiple Choice

A recently concluded penetration test revealed that a legacy web application is vulnerable to SQL injection. Research indicates that completely remediating the vulnerability would require an architectural change, and the stakeholders are not in a position to risk the availability on the application. Under such circumstances, which of the following controls are low-effort, short-term solutions to minimize the SQL injection risk? (Choose two.)

• A) Identity and eliminate inline SQL statements from the code.
• B) Identify and eliminate dynamic SQL from stored procedures.
• C) Identify and sanitize all user inputs.
• D) Use a whitelist approach for SQL statements.
• E) Use a blacklist approach for SQL statements.
• F) Identify the source of malicious input and block the IP address.

---

Definitions:

Anchor

A device, usually made of metal, used to connect a vessel to the bed of a body of water to prevent the craft from drifting due to wind or current.

Internal Friction Surface

The surface within a mechanical system where internal friction occurs, often influencing the efficiency and wear of the system.

Shoes

Footwear made from various materials, designed to protect and comfort the human foot while doing various activities.

Backing Plate

A component of drum brakes that holds the brake assembly together against the drum.