Joe, an Attacker, Intends to Transfer Funds Discreetly from a Victim's

question 8

Multiple Choice

Joe, an attacker, intends to transfer funds discreetly from a victim's account to his own. Which of the following URLs can he use to accomplish this attack?

• A) https://testbank.com/BankingApp/ACH.aspx?CustID=435345&accountType=F&action-ACHTransfer&senderID=654846¬ify=False&creditaccount='OR 1=1 AND select username from testbank.custinfo where username like 'Joe'?&amount=200
• B) 1=1 AND select username from testbank.custinfo where username like 'Joe' &amount=200
• C) https://testbank.com/BankingApp/ACH.aspx?CustID=435345&accountType=F&action-ACHTransfer&senderID=654846¬ify=True&creditaccount='OR 1=1 AND select username from testbank.custinfo where username like 'Joe' ?&amount=200
• D) https://testbank.com/BankingApp/ACH.aspx?CustID=435345&accountType=F&action-ACHTransfer&senderID=654846¬ify=True&creditaccount='AND

---

Definitions:

Spans of Control

The number of subordinates directly managed by a supervisor, impacting the supervisor's workload and management efficiency.

Supervision

The act of overseeing or directing work and workers.

Promotion Opportunities

The availability and visibility of pathways for career advancement within an organization, often acting as a motivator for employee performance.

Centralization

The concentration of decision-making authority at the top levels of an organizational hierarchy.