John , a SOC analyst, while monitoring and analyzing Apache web server logs, identified an event log matching Regex /(\.|(%|%25)2E)(\.|(%|%25)2E)(\/|(%|%25)2F|\\|(%|%25)5C)/i.
What does this event log indicate?
Suggested Answer: A
Get Premium 312-39 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
ET
Ettie
12 months ago
I thought it could be SQL injection too, but I see the point.
CA
Carmela
12 months ago
100% Directory Traversal, no doubt about it!
KE
Kelvin
12 months ago
Wait, are we sure it's not XSS? Seems a bit ambiguous.
QU
Quentin
1 year ago
Agreed, the regex pattern points to path traversal.
HU
Hubert
1 year ago
That's definitely a Directory Traversal Attack.
EM
Emiko
1 year ago
I feel like I’ve seen similar questions before, and directory traversal seems to fit best with this regex pattern.
MA
Malcolm
1 year ago
This regex looks familiar; I think it indicates a directory traversal attack since it’s trying to access parent directories.
MA
Matt
1 year ago
I'm not entirely sure, but I think it could also be related to XSS attacks? I need to double-check that.
LI
Lindsey
1 year ago
I remember we discussed regex patterns in class, and this one seems to relate to directory traversal.
AN
Annmarie
1 year ago
This is a topic I feel pretty confident about. I'll highlight how sea freight is the more sustainable option due to the lower energy requirements and reduced greenhouse gas emissions. I'll also mention how it avoids the noise pollution associated with air travel.
PO
Portia
1 year ago
This seems like a straightforward question about information security policies. I'll review the options carefully and choose the one that best describes what an InfoSec policy covers.
BO
Bo
1 year ago
Camera-grade security for data centers? That doesn't sound right at all. I'm pretty sure Meraki MX is focused on branch office and distributed network infrastructure, not data centers. I'll rule that one out.
NA
Narcisa
1 year ago
I've got this! The Windows 7 edition that requires special licensing and is not available through retail is Windows 7 Enterprise. I remember learning about the different editions in my Windows administration course, and Enterprise is the one designed for larger organizations.