nerdexam
IBM

C2150-810 · Question #3

You are reviewing a cloud storage locker application that is used to store and share user files and backups. You come across Cross-Site Scripting findings with data coming from several different…

The correct answer is D. FileUpload.getFileContents(). See the full explanation below for the reasoning.

Question

You are reviewing a cloud storage locker application that is used to store and share user files and backups. You come across Cross-Site Scripting findings with data coming from several different sources. The customer you are working with is just getting started and is looking for highest priority issues only, so you need to focus on those issues that originate from the source that poses the highest risk. Which source poses the highest risk?

Options

  • ASqIDB.getValueO
  • BZipCrypto.extract()
  • CConfigXMLgetConfigValue()
  • DFileUpload.getFileContents()
  • ETCPNetworkHandler.getByteArray()

How the community answered

(21 responses)
  • B
    14% (3)
  • C
    10% (2)
  • D
    71% (15)
  • E
    5% (1)

Community Discussion

No community discussion yet for this question.

Full C2150-810 Practice