MENU
Jane, a security analyst, while analyzing IDS logs, detected an event matching Regex /((\%3C)|<)((\%69)|i|(\% 49))((\%6D)|m|(\%4D))((\%67)|g|(\%47))[^\n]+((\%3E)|>)/|.
What does this event log indicate?
Suggested Answer: C
Get Premium 312-39 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
%253C)%7C<)((%5C%2569)%7Ci%7C(%5C%2549))((%5C%256D)%7Cm%7C(%5C%254D))((%5C% 2567)%7Cg%7C(%5C%2547))%5B%5E%5Cn%5D%2B((%5C%253E)%7C>)/%
7C&source=bl&ots=kOBHNfJmtq&sig=ACfU3U2CG_hELc1HMb1chdc9OS4ooXPlMg&hl=en&sa=X&ved=2ah UKEwjYwJmlt_buAhUFShUIHTBNAs8Q6AEwBXoECAUQAw#v=onepage&q&f=false
14 comments · newest first
PA
Paris
12 months ago
Regex patterns like that usually indicate parameter tampering.
AH
Ahmed
12 months ago
Wait, are we sure about that? Looks suspicious.
LA
Lauran
12 months ago
Totally agree, it's XSS for sure!
MA
Marya
1 year ago
I thought it was SQL injection at first.
ST
Stefania
1 year ago
That's definitely an XSS attack.
YA
Yaeko
1 year ago
I’m a bit confused, but I recall that directory traversal usually involves file paths, so I don’t think that’s it either.
LA
Lashon
1 year ago
This seems familiar; I practiced a question on parameter tampering, but I don’t think that fits here.
NA
Natalie
1 year ago
I'm not entirely sure, but I remember something about regex patterns being used for SQL injections too.
LE
Lea
1 year ago
I think this regex looks like it’s trying to match HTML tags, which makes me lean towards an XSS attack.
JO
Johnathon
1 year ago
Okay, I've got this. The auditee would likely want to assess the auditor's interviewing, interaction, and report accuracy - that's option A.
WI
William
1 year ago
I'm a bit confused by the "improved system performance" option. I'm not sure how that would relate to naming conventions for suppliers. I'll have to think about that one.
JA
Jacquline
1 year ago
I'm a bit unsure about this one. Importing an external schema into a WSDL document is a specific skill, and I want to make sure I get it right. I'll carefully read through the question and options, and try to reason through the correct way to handle this scenario.
TA
Tamar
1 year ago
I'm leaning towards C on this one. I seem to recall that if the client consents, we don't necessarily need a reinforcement procedure when using punishment. But I'll double-check my notes to be sure.
RA
Raul
1 year ago
I'm pretty sure challenge/response authentication is used to prevent replay attacks, so I'll go with option A.