Ethical Hacking Essentials Practice Test

Which application security risk occurs when untrusted data is sent to an interpreter as part of a command or query?

1. Command Injection

2. SQL Injection

3. A1 - Injection

4. Path Traversal

The correct answer is: A1 - Injection

The correct answer is identified as a broad category known as injection risks, which includes various specific types of injection attacks. The term "A1 - Injection" refers to the classification of injection vulnerabilities as listed in the OWASP Top Ten, which highlights major security risks. Injection vulnerabilities occur when untrusted data is improperly filtered and then sent to an interpreter, allowing attackers to manipulate the commands executed by the interpreter or database. This can lead to unauthorized commands being executed, potentially allowing the attacker to gain access to sensitive data or system functionality. While "Command Injection" and "SQL Injection" are types of injection attacks that fall under this broader category, "A1 - Injection" encompasses all forms of injection risks, emphasizing its importance in application security. Path Traversal is a different class of vulnerability that involves unauthorized file access rather than injecting commands or queries. Thus, recognizing "A1 - Injection" as the correct answer highlights the overarching nature of injection vulnerabilities in web application security.