An Application Developer Has Neglected to Include Input Validation Checks

question 28

Multiple Choice

An application developer has neglected to include input validation checks in the design of the company's new web application. An employee discovers that repeatedly submitting large amounts of data, including custom code, to an application will allow the execution of the custom code at the administrator level. Which of the following BEST identifies this application attack?

• A) Cross-site scripting
• B) Clickjacking
• C) Buffer overflow
• D) Replay

---

Definitions:

Shortcuts

Simplified ways of accomplishing a task or finding a solution more efficiently.

Mental Set

A framework of thinking, including habits, attitudes, and experiences, that shapes how an individual perceives and responds to situations.

Functional Fixedness

A mental bias that restricts an individual to employing an item solely in its conventional use, obstructing the resolution of problems.

Nine Dot Problem

A puzzle that challenges individuals to connect nine dots arranged in a square grid using four straight lines or fewer, without lifting the pen from the paper.