Exam 1Y0-341 All QuestionsBrowse all questions from this exam
Question 93

A Citrix Engineer for an online retailer wants to ensure that customer address information is NOT stolen.

Which protection can the engineer implement to prevent this?

    Correct Answer: C

    Form Field Consistency is a protection mechanism used to ensure that the data entered into form fields has not been tampered with. This helps in preventing unauthorized changes to customer information, including their addresses. Other options like Credit Card Check, HTML SQL Injection, and Cross-Site Request Forgeries (CSRF) are protections for different types of threats, such as payment details, database manipulation, and unauthorized actions, respectively. For the specific case of protecting customer address information from being stolen or altered, ensuring form field consistency is the most relevant measure.

Discussion
thedelphOption: B

B. HTML SQL Injection To ensure that customer address information is not stolen, a Citrix Engineer should implement protections against HTML SQL Injection attacks. SQL Injection attacks can be used to manipulate a database to unauthorized ends, such as extracting sensitive data like customer addresses. By putting measures in place to prevent SQL Injection, the engineer can protect against unauthorized access or manipulation of the database that contains customer information. This involves validating input, using parameterized queries, and employing a web application firewall configured to block SQL Injection attempts.