Which item is a type of attack listed under Types of Attacks?

Which item is a type of attack listed under Types of Attacks?

• A. OS Vulnerabilities
• B. Illegal Access
• C. Application Level Attacks
• D. Exploitation of Settings and Incomplete Code

Answer: (C)

Attack types are often grouped by where the attacker targets the system. When the focus is on weaknesses in the software applications themselves, that category is application level attacks. This type covers threats that exploit flaws in the application’s logic, input handling, or code—think SQL injection, cross-site scripting, or authentication bypass within an app. It’s a standard label for a class of attacks because it describes the layer being attacked and the method used. The other options describe things that aren’t a formal attack type: OS vulnerabilities refer to weaknesses in the operating system, not a specific class of attack; illegal access describes the result or outcome of an intrusion rather than a labeled attack category; exploitation of settings and incomplete code describes particular weaknesses or exploitation techniques, not a named attack type by itself. Hence, the correct choice is application level attacks.

Attack types are often grouped by where the attacker targets the system. When the focus is on weaknesses in the software applications themselves, that category is application level attacks. This type covers threats that exploit flaws in the application’s logic, input handling, or code—think SQL injection, cross-site scripting, or authentication bypass within an app. It’s a standard label for a class of attacks because it describes the layer being attacked and the method used.

The other options describe things that aren’t a formal attack type: OS vulnerabilities refer to weaknesses in the operating system, not a specific class of attack; illegal access describes the result or outcome of an intrusion rather than a labeled attack category; exploitation of settings and incomplete code describes particular weaknesses or exploitation techniques, not a named attack type by itself. Hence, the correct choice is application level attacks.