'Data coming into a program should be sanitized, as it could have malicious content, designed to force the program to behave in an unintended way.' This statement describes what security vulnerability?
- Weaknesses in security practices
- Access control problems
- Buffer overflow
- Non-validated input
- Race conditions
Explanation: Non-validated input is a software vulnerability that occurs when data entering a program is not properly sanitized, allowing it to contain malicious content designed to force the program to behave in an unintended way. An example of this exploit is a user providing a file with invalid dimensions to force a program to allocate buffers of incorrect and unexpected sizes.
Related exam: Introduction to Cybersecurity final course exam answers
Related exam: Introduction to Cybersecurity: My Knowledge Check
