nerdexam
EC-Council

312-50V9 · Question #413

If an e-commerce site was put into a live environment and the programmers failed to remove the secret entry point that was used during the application development, what is this secret entry point…

The correct answer is D. Trap door. A secret entry point intentionally created during development and left in production software is called a trap door (backdoor), which bypasses normal authentication controls.

System Hacking

Question

If an e-commerce site was put into a live environment and the programmers failed to remove the secret entry point that was used during the application development, what is this secret entry point known as?

Options

  • ASDLC process
  • BHoney pot
  • CSQL injection
  • DTrap door

How the community answered

(61 responses)
  • A
    3% (2)
  • B
    2% (1)
  • C
    5% (3)
  • D
    90% (55)

Why each option

A secret entry point intentionally created during development and left in production software is called a trap door (backdoor), which bypasses normal authentication controls.

ASDLC process

The SDLC (Software Development Life Cycle) is a project management and development methodology framework, not a type of entry point or vulnerability.

BHoney pot

A honeypot is a deliberately exposed decoy system used to detect or study attackers, not a developer-created hidden access mechanism.

CSQL injection

SQL injection is an attack technique that manipulates database queries through unsanitized input, not a secret entry point built into application code.

DTrap doorCorrect

A trap door - also called a backdoor - is a hidden mechanism built into software by developers to allow direct access, bypassing normal security controls. When programmers forget to remove it before deploying to a live environment, it becomes a serious vulnerability that attackers can discover and exploit. It is specifically characterized by being an intentional, concealed entry point embedded in the application code.

Concept tested: Trap door / backdoor vulnerability in software

Source: https://csrc.nist.gov/glossary/term/trapdoor

Topics

#trap door#backdoor#SDLC#web application security

Community Discussion

No community discussion yet for this question.

Full 312-50V9 Practice