CAS-004 practice question 10 of 35
A security engineer is reviewing Apache web server logs and has identified the following pattern in the log: GET https://example.com/image5/../../etc/passwd HTTP/1.1 200 OK The engineer has also reviewed IDS and firewall logs and established a correlation to an external IP address. Which of the following can be determined regarding the vulnerability and response?
Full set: 610 questionsCorrect Answer:
C. A directory traversal attack was successful at reading the /etc/passwd file, and the system should
avoid passing user-supplied input to the filesystem.
Explanation
A directory traversal attack exploits vulnerabilities in file path handling to access unauthorized files, as seen in this example. To mitigate, sanitize user inputs and avoid directly passing user-supplied data to the filesystem. This aligns with CASP+ objective 1.5, addressing secure input validation and mitigating common web-based vulnerabilities.
Keep practicing
Take the free CAS-004 practice test
Ten exam-style questions with answers and explanations, plus the exam facts and study guides.
More questions
Other CAS-004 practice questions
- Question 1During a review of events, a security analyst notes that several log entries from the FIM…
- Question 2A security engineer is performing a threat modeling procedure against a machine learning …
- Question 3Which of the following security features do email signatures provide?
- Question 4A security analyst is examining a former employee's laptop for suspected evidence of susp…
- Question 6An IT director is working on a solution to meet the challenge of remotely managing laptop…
- Question 7Which of the following is the reason why security engineers often cannot upgrade the secu…