A SOC analyst identifies the following content while examining the output of a debugger command over a client-server application: getConnection(database01,"alpha" ,"AxTv.127GdCx94GTd"); Which of the…

The correct answer is C. Hard-coded credential. The most likely vulnerability in this system is hard-coded credential. Hard-coded credential is a practice of embedding or storing a username, password, or other sensitive information in the source code or configuration file of a system or application. Hard-coded credential can…

Submitted by tyler.j· Mar 6, 2026Vulnerability Management

Question

A SOC analyst identifies the following content while examining the output of a debugger command over a client-server application:

getConnection(database01,"alpha" ,"AxTv.127GdCx94GTd"); Which of the following is the most likely vulnerability in this system?

Options

ALack of input validation
BSQL injection
CHard-coded credential
DBuffer overflow

How the community answered

(44 responses)

A
5% (2)
B
9% (4)
C
84% (37)
D
2% (1)

Explanation

The most likely vulnerability in this system is hard-coded credential. Hard-coded credential is a practice of embedding or storing a username, password, or other sensitive information in the source code or configuration file of a system or application. Hard-coded credential can pose a serious security risk, as it can expose the system or application to unauthorized access, data theft, or compromise if the credential is discovered or leaked by an attacker. Hard-coded credential can also make it difficult to change or update the credential if needed, as it may require modifying the code or file and redeploying the system or application.

Topics

#Application security#Hard-coded credentials#Vulnerability identification#Code review

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice