PWPP Practice Questions - TCM Security Practical Web Pentest Professional Exam

Access More Questions

An application endpoint processes JSON and is vulnerable to NoSQL injection. To extract data character-by-character from a MongoDB field using blind injection, which operator would an attacker use?

$$where with JavaScript sleep for time-based inference $$text for full-text search index abuse $$regex to test field values matching partial patterns $$lookup to join across collections and extract data

Correct Answer:

$$regex to test field values matching partial patterns

Access more questions from this quiz

Continue to PWPP Practice Questions - TCM Security Practical Web Pentest Professional Exam for more practice questions and the full quiz experience.

Access More Questions