Study. uk . com
  1. Home
  2. All questions
  3. Question 139

CompTIA Security+ study material · question 139 of 611

What is the underlying cause common to every injection flaw?

  1. Missing encryption of data in transit
  2. Sessions that are never rotated
  3. Insufficient logging of failed requests
  4. Untrusted input being interpreted as code or as part of a command
Show the answer

Answer: D. Untrusted input being interpreted as code or as part of a command

The fix in every case is to keep data and instructions in separate channels rather than concatenating them.

Source: OWASP SQL Injection Prevention Cheat Sheet (OWASP) — OWASP SQL Injection Prevention Cheat Sheet › Introduction

Challenge yourself on this topic → Study as cards