Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council 312-39 Exam - Topic 5 Question 50 Discussion

Posted by Jesusa on May 05, 2022 at 06:28 PM

John , a SOC analyst, while monitoring and analyzing Apache web server logs, identified an event log matching Regex /(\.|(%|%25)2E)(\.|(%|%25)2E)(\/|(%|%25)2F|\\|(%|%25)5C)/i.

What does this event log indicate?

Suggested Answer: A

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
13 comments · newest first
ET
Ettie 12 months ago
I thought it could be SQL injection too, but I see the point.
CA
Carmela 12 months ago
100% Directory Traversal, no doubt about it!
KE
Kelvin 12 months ago
Wait, are we sure it's not XSS? Seems a bit ambiguous.
QU
Quentin 1 year ago
Agreed, the regex pattern points to path traversal.
HU
Hubert 1 year ago
That's definitely a Directory Traversal Attack.
EM
Emiko 1 year ago
I feel like I’ve seen similar questions before, and directory traversal seems to fit best with this regex pattern.
MA
Malcolm 1 year ago
This regex looks familiar; I think it indicates a directory traversal attack since it’s trying to access parent directories.
MA
Matt 1 year ago
I'm not entirely sure, but I think it could also be related to XSS attacks? I need to double-check that.
LI
Lindsey 1 year ago
I remember we discussed regex patterns in class, and this one seems to relate to directory traversal.
AN
Annmarie 1 year ago
This is a topic I feel pretty confident about. I'll highlight how sea freight is the more sustainable option due to the lower energy requirements and reduced greenhouse gas emissions. I'll also mention how it avoids the noise pollution associated with air travel.
PO
Portia 1 year ago
This seems like a straightforward question about information security policies. I'll review the options carefully and choose the one that best describes what an InfoSec policy covers.
BO
Bo 1 year ago
Camera-grade security for data centers? That doesn't sound right at all. I'm pretty sure Meraki MX is focused on branch office and distributed network infrastructure, not data centers. I'll rule that one out.
NA
Narcisa 1 year ago
I've got this! The Windows 7 edition that requires special licensing and is not available through retail is Windows 7 Enterprise. I remember learning about the different editions in my Windows administration course, and Enterprise is the one designed for larger organizations.
0/2000 characters

Save Cancel