CEH Web Application and Injection Attacks Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  SQL injection

  Why it's wrong here

  SQL injection involves manipulating an application's input fields to inject malicious SQL code, thereby altering or bypassing database queries. The scenario described, where an analyst changes a numeric ID in a URL parameter, does not involve the characteristic syntax or method of SQL injection. This attack vector focuses on direct object references rather than database query manipulation.

• ✓

  IDOR

  Why this is correct

  Insecure Direct Object Reference (IDOR) vulnerabilities arise when an application exposes a direct reference to an internal implementation object, such as a file, directory, or database record, without sufficient authorization checks. By simply changing a numeric ID in the URL, the security analyst is directly accessing another object that they should not be authorized to view or modify, demonstrating a clear failure in access control for that specific resource.

• ✗

  Directory traversal

  Why it's wrong here

  Directory traversal, also known as path traversal, exploits vulnerabilities in file system access controls by manipulating input to reference files or directories outside of the intended web root directory. This typically involves using special characters like "../" to navigate the file system. The described action of altering a numeric ID in a URL parameter does not involve path manipulation or attempts to access restricted file system locations.

• ✗

  CSRF

  Why it's wrong here

  Cross-Site Request Forgery (CSRF) attacks involve tricking a victim's web browser into sending an authenticated request to a vulnerable web application without their knowledge or consent. This typically requires a malicious third-party site to embed a request that the victim's browser automatically executes. The scenario describes the analyst directly manipulating a URL parameter within their own browser, which is a direct action and not a cross-site request initiated by a third party.

Go deeper

Related to this question