A Security Analyst Receives an Alert from a WAF with the Following

question 30

Multiple Choice

A security analyst receives an alert from a WAF with the following payload: var data= "<test test test>" ++ <../../../../../../etc/passwd>" Which of the following types of attacks is this?

• A) Cross-site request forgery
• B) Buffer overflow
• C) SQL injection
• D) JavaScript data insertion
• E) Firewall evasion script

---

Definitions:

Confirmation Bias

The inclination to seek out, understand, prefer, and remember details in a manner that validates one's existing opinions or theories.

Sunk Cost Effect

The phenomenon where a person continues an endeavor because of previously invested resources (time, money, or effort), despite potential losses.

Availability Heuristic

The availability heuristic is a mental shortcut that relies on immediate examples that come to mind when evaluating a specific topic, concept, method, or decision.

Confirmation Bias

Confirmation bias is the tendency to search for, interpret, favor, and recall information in a way that confirms one’s preexisting beliefs or hypotheses.