CY0-001 · Question #68
A security alert triggers an agentic system. An analyst notices the following payload in the logs" The alert includes multiple shell commands that are not typically run as part of any hardening…
The correct answer is A. Adding logic that includes approved strings before running the shell commands. The payload in the alert attempts to trick the system into executing unauthorized shell commands. The most effective control is to implement allow-list validation (approved strings) before execution. This ensures that only predefined, safe commands are executed, blocking prompt…
Question
A security alert triggers an agentic system. An analyst notices the following payload in the logs” The alert includes multiple shell commands that are not typically run as part of any hardening. Which of the following is the most effective control to implement?
Exhibit
Options
- AAdding logic that includes approved strings before running the shell commands
- BDeprecating model usage and retaining the model with safer parameters
- CModifying the application to ignore the SECURITY_UPDATE tag
- DUsing only approved libraries when interacting with agentic systems
How the community answered
(54 responses)- A69% (37)
- B19% (10)
- C4% (2)
- D9% (5)
Explanation
The payload in the alert attempts to trick the system into executing unauthorized shell commands. The most effective control is to implement allow-list validation (approved strings) before execution. This ensures that only predefined, safe commands are executed, blocking prompt injection attempts that introduce malicious code such as the fake patch script.
Topics
Community Discussion
No community discussion yet for this question.