MENU
Jony, a security analyst, while monitoring IIS logs, identified events shown in the figure below.
What does this event log indicate?
Suggested Answer: C
Get Premium 312-39 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
33 comments · newest first
CO
Corazon
11 months ago
Parameter Tampering seems plausible too, but SQL Injection is a strong contender.
LE
Leslie
11 months ago
Wait, are we sure? This could be something else entirely.
DA
Dacia
11 months ago
Totally agree with Demetra, SQL Injection fits the pattern.
AN
Anglea
12 months ago
I think it's more likely a Directory Traversal Attack.
DE
Demetra
12 months ago
Looks like a classic SQL Injection Attack to me.
JA
Janna
1 year ago
I think this log might indicate Parameter Tampering. We discussed how attackers manipulate parameters in requests, but I’m not completely confident about it.
SH
Sharita
1 year ago
I feel like this could be a Directory Traversal Attack. I remember that it involves accessing restricted directories, but I need to double-check the log details.
AR
Arlyne
1 year ago
This seems similar to a practice question we did on XSS attacks. I think it might be related, but I can't recall the specific indicators that differentiate them.
TR
Tracie
1 year ago
I remember studying about different types of attacks, but I'm not entirely sure which one this log indicates. It could be SQL Injection, but I need to analyze the details more closely.
SK
Skye
1 year ago
Okay, let me think this through step-by-step. The event log shows some unusual activity, but I'm not sure which attack type it corresponds to. I'll need to carefully consider each option and eliminate the ones that don't fit.
HE
Herschel
1 year ago
Ah, this is a classic web security scenario. Based on the suspicious-looking parameters in the URL, I'd say this is likely a parameter tampering attack. I'm pretty confident in that assessment.
JE
Jerilyn
1 year ago
This looks like a tricky one, but I think I can figure it out. I'll carefully analyze the event log details and compare them to the attack types listed.
JE
Jettie
1 year ago
Hmm, I'm a bit unsure about this one. The event log doesn't seem to give a clear indication of the attack type. I'll need to review my notes on different web application vulnerabilities to make an informed decision.
IR
Iraida
1 year ago
Hmm, I'm not totally sure about this one. I'll have to think it through and eliminate the options that seem clearly wrong.
PE
Pearlene
1 year ago
I'm a bit confused on this one. Is it something to do with the Data Server Connection or the Data Source Connection? I'll need to review the Cognos documentation to make sure I understand the right approach.
MI
Michael
1 year ago
Ah, the classic 'guess the attack' game. I'll just sit back and watch the security experts duke it out.
JU
Justa
1 year ago
Looks like Jony needs to upgrade his web server security. Maybe he should try turning it off and on again?
TE
Tesha
1 year ago
You guys are all wrong. This is a classic SQL Injection Attack. The attacker is trying to exploit the web application's database.
TU
Tula
1 year ago
I disagree with both of you. This is clearly an XSS Attack, where the attacker is trying to inject malicious code into the web application.
YO
Yolande
1 year ago
C) Directory Traversal Attack
MA
Maira
1 year ago
B) XSS Attack
BR
Brynn
1 year ago
A) Parameter Tampering Attack
BE
Benedict
2 years ago
Hmm, I'm not so sure. The event log seems to suggest a Parameter Tampering Attack, where the attacker is trying to manipulate the input parameters.
CA
Carma
1 year ago
I agree, the logs do indicate that.
HO
Hoa
1 year ago
I think it might be a Parameter Tampering Attack.
PE
Peggie
2 years ago
I'm not sure, but it could also be a Parameter Tampering Attack.
BR
Brendan
2 years ago
I agree with Viva, the event log does seem to indicate a SQL Injection Attack.
HE
Hester
2 years ago
The event log looks like a Directory Traversal Attack to me. That image is pretty clear about the request trying to navigate outside the web root directory.
KI
Kizzy
1 year ago
I believe it's a SQL Injection Attack. The request appears to be trying to manipulate the database query to retrieve sensitive information.
JO
Jordan
1 year ago
I'm leaning towards XSS Attack. The request looks like it's trying to inject malicious scripts into the web application.
NI
Niesha
1 year ago
I think it could also be a Parameter Tampering Attack. The request seems to be manipulating parameters to access unauthorized data.
PH
Phyliss
2 years ago
I agree, it does seem like a Directory Traversal Attack. The request is trying to access files outside the intended directory.
VI
Viva
2 years ago
I think it might be a SQL Injection Attack.