nerdexam
Cisco

200-201 · Question #382

Refer to the exhibit. Which attack is being attempted against a web application?

The correct answer is A. command injection. The exhibit shows an HTTP GET request with a parameter that includes ; /bin/sh -c id. This indicates a command injection attempt, where the attacker is trying to execute shell commands Command injection vulnerabilities allow an attacker to execute arbitrary commands on the host…

Submitted by devops_kid· Mar 6, 2026Network Intrusion Analysis

Question

Refer to the exhibit. Which attack is being attempted against a web application?

Exhibit

200-201 question #382 exhibit

Options

  • Acommand injection
  • Bman-in-the-middle
  • Cdenial of service
  • DSQL injection

How the community answered

(22 responses)
  • A
    91% (20)
  • B
    5% (1)
  • C
    5% (1)

Explanation

The exhibit shows an HTTP GET request with a parameter that includes ; /bin/sh -c id. This indicates a command injection attempt, where the attacker is trying to execute shell commands Command injection vulnerabilities allow an attacker to execute arbitrary commands on the host operating system via a vulnerable application. The use of /bin/sh and the -c flag is typical in command injection exploits to run shell commands, such as id, which returns user identity information.

Topics

#Command injection#Web application attacks

Community Discussion

No community discussion yet for this question.

Full 200-201 Practice