Which item is listed as a type of attack that targets vulnerabilities at the application layer?

Which item is listed as a type of attack that targets vulnerabilities at the application layer?

• A. OS Vulnerabilities
• B. Illegal Access
• C. Application Level Attacks
• D. Exploitation of Settings and Incomplete Code

Answer: (C)

Attacks that target vulnerabilities at the application layer focus on the software that processes data and enforces business logic—such as web apps, APIs, and other services running on top of the operating system. This is exactly what the term application level attacks describes: threats aimed at flaws in the application itself, like input validation, authentication, session management, or business logic bugs. Examples include SQL injection, cross-site scripting, and insecure API endpoints, where the attacker exploits how the application handles data and requests. The other options point to different areas. OS vulnerabilities affect the operating system and its components, not the application software. Illegal access is a broad outcome of unauthorized entry and doesn’t specify a type of attack at the application level. Exploitation of settings and incomplete code refers to insecure configurations or flawed code in general, not to the established category of attacks that target the application layer specifically.

Attacks that target vulnerabilities at the application layer focus on the software that processes data and enforces business logic—such as web apps, APIs, and other services running on top of the operating system. This is exactly what the term application level attacks describes: threats aimed at flaws in the application itself, like input validation, authentication, session management, or business logic bugs. Examples include SQL injection, cross-site scripting, and insecure API endpoints, where the attacker exploits how the application handles data and requests.

The other options point to different areas. OS vulnerabilities affect the operating system and its components, not the application software. Illegal access is a broad outcome of unauthorized entry and doesn’t specify a type of attack at the application level. Exploitation of settings and incomplete code refers to insecure configurations or flawed code in general, not to the established category of attacks that target the application layer specifically.