Which type of attack targets weaknesses at the application layer?

Which type of attack targets weaknesses at the application layer?

• A. OS Vulnerabilities
• B. Illegal Access
• C. Application Level Attacks
• D. Exploitation of Settings and Incomplete Code

Answer: (C)

Attacks that target weaknesses at the application layer focus on the software that runs the service—things like web apps, APIs, and other programs—rather than the operating system or hardware. These exploits take advantage of flaws in the application's logic, input handling, authentication and authorization, session management, or business rules. By crafting requests that abuse these flaws (for example, injecting malicious input, bypassing controls, or abusing misconfigured features), the attacker reaches the layer where the application's code and data processing occur. This is why the best choice is the one that explicitly refers to Application Level Attacks. They are the specific category for vulnerabilities and exploits that reside in the application itself. The other options describe different targets or concepts: vulnerabilities in the operating system, broad illegal access without tying to a specific layer, or issues like misconfigurations and incomplete code, which can contribute to risks but aren’t as precise in labeling the attack as an application-layer one.

Attacks that target weaknesses at the application layer focus on the software that runs the service—things like web apps, APIs, and other programs—rather than the operating system or hardware. These exploits take advantage of flaws in the application's logic, input handling, authentication and authorization, session management, or business rules. By crafting requests that abuse these flaws (for example, injecting malicious input, bypassing controls, or abusing misconfigured features), the attacker reaches the layer where the application's code and data processing occur.

This is why the best choice is the one that explicitly refers to Application Level Attacks. They are the specific category for vulnerabilities and exploits that reside in the application itself. The other options describe different targets or concepts: vulnerabilities in the operating system, broad illegal access without tying to a specific layer, or issues like misconfigurations and incomplete code, which can contribute to risks but aren’t as precise in labeling the attack as an application-layer one.