S90-19 practice question 1 of 15
A service is designed to respond to an error condition by issuing a message containing detailed error information. This message includes connection…
Choose your answer, then check it against the explanation.
A service is designed to respond to an error condition by issuing a message containing detailed error
information. This message includes connection information for a database that is shared by
numerous services within the service inventory. An attacker intentionally sends an invalid message to
the service in order to trigger an error and receive the connection information. The attacker then
proceeds to connect to the database and issues a series of malicious SQL queries that make the
database non-responsive. As a result, a number of services within the service inventory are disabled.
Which of the following types of attacks were successfully carried out?
Question 1 of 15
Keep practicing
Take the free S90-19 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other S90-19 practice questions
- Question 2Because of a new security requirement, all messages received by Service A need to be logg…
- Question 3Service A contains reporting logic that collects statistical data from different sources …
- Question 4The application of the Message Screening pattern can help avoid which of the following at…
- Question 5The Exception Shielding pattern can be applied together with the Trusted Subsystem patter…
- Question 6Which of the following types of attack always affect the availability of a service?
- Question 7The exception shielding logic resulting from the application of the Exception Shielding p…