Question

A security engineer is reviewing Apache web server logs and has identified the following pattern in the log: GET https://example.com/image5/../../etc/passwd HTTP/1.1 200 OK The engineer has also reviewed IDS and firewall logs and established a correlation to an external IP address. Which of the following can be determined regarding the vulnerability and response?

Accepted Answer

A directory traversal attack was successful at reading the /etc/passwd file, and the system should avoid passing user-supplied input to the filesystem.

Answer

A cross-site scripting attack was successful at reading the /etc/passwd file, and the system should avoid passing user-supplied input to REST API.

Answer

A cross-site request forgery attack was successful at reading the /etc/passwd file, and the system should avoid passing user-supplied input to HTTP POST commands.

Answer

A brute-force authentication attempt was successful, and the system should implement salting as part of the password hashing algorithm.

A security engineer is reviewing Apache web server logs and has identified the following pattern in the log: GET…

Take the free CAS-004 practice test

Other CAS-004 practice questions