ADR-001 · Question #110
Failing to declare a class final can enable which of the following attacks on a developer's code?
The correct answer is D. Attacker can potentially extend a class and define new methods that access sensitive data from. Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, Microsoft, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan…
Question
Failing to declare a class final can enable which of the following attacks on a developer's code?
Options
- ASession hijacking via compromised session cookies
- BDecompilation of java class files (including those in APK files), revealing sensitive data
- CAttacker can use data injection (e.g., SQL injection, Cross-site scripting) to corrupt data in the
- DAttacker can potentially extend a class and define new methods that access sensitive data from
How the community answered
(61 responses)- A8% (5)
- B5% (3)
- C15% (9)
- D72% (44)
Explanation
Exam Questions, Study Guides, Practice Tests. Lead the way to help you pass any IT Certification exams, 100% Pass Guaranteed or Full Refund. Especially Cisco, Microsoft, CompTIA, Citrix, EMC, HP, Oracle, VMware, Juniper, Check Point, LPI, Nortel, EXIN and so on. Our Slogan: First Test, First Pass. Help you to pass any IT Certification exams at the first try. You can reach us at any of the email addresses listed below. Any problems about IT certification or our products, you could rely upon us, we will give you satisfactory answers in 24 hours.
Topics
Community Discussion
No community discussion yet for this question.