PWPP Practice Questions - TCM Security Practical Web Pentest Professional Exam

Access More Questions

A web application uses MongoDB and constructs a login query as `db.users.find({username: req.body.username, password: req.body.password})`. An attacker submits `{"username": "admin", "password": {"$ne": null}}`. What type of attack is this?

NoSQL injection using MongoDB operator injection SQL injection using UNION-based technique LDAP injection exploiting DN metacharacters XML injection targeting XPATH queries

Correct Answer:

NoSQL injection using MongoDB operator injection

Access more questions from this quiz

Continue to PWPP Practice Questions - TCM Security Practical Web Pentest Professional Exam for more practice questions and the full quiz experience.

Access More Questions