MENU
John, a SOC analyst, while monitoring and analyzing Apache web server logs, identified an event log matching Regex /(\.|(%|%25)2E)(\.|(%|%25)2E)(\/|(%|%25)2F|\\|(%|%25)5C)/i.
What does this event log indicate?
Suggested Answer: B
Get Premium 312-39 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
TA
Tamala
11 months ago
Regex can be tricky, but I think C is the right call here.
LA
Laquanda
11 months ago
Wait, are we sure it's not XSS? Seems a bit ambiguous.
AS
Ashleigh
11 months ago
Totally agree, it's about accessing restricted directories.
AD
Adelaide
12 months ago
I thought it was SQL injection at first, but now I'm not so sure.
AL
Alfred
12 months ago
That's definitely a Directory Traversal Attack.
TA
Tatum
1 year ago
I’m pretty confident this is about directory traversal. The pattern looks like it’s trying to access parent directories.
CH
Charisse
1 year ago
I’m a bit confused; could it also relate to XSS or SQL injection? I feel like I need to review those concepts again.
LA
Lai
1 year ago
I remember practicing a question about regex patterns, and I think this one indicates a directory traversal as well.
SA
Salena
1 year ago
I think this regex pattern is related to directory traversal attacks, but I'm not entirely sure.
CA
Catarina
1 year ago
The regex pattern looks complex, but I think it's trying to detect a directory traversal attempt. I'll carefully consider the options and choose the best answer.
KA
Katie
1 year ago
Okay, this regex is definitely checking for something related to file paths and directories. I'm pretty sure it's a directory traversal attack, but I'll review the options to confirm.
AL
Alyce
1 year ago
Hmm, the regex seems to be looking for encoded directory separators. That could indicate a directory traversal attack, but I'll need to double-check the details to be sure.
LU
Luis
1 year ago
This regex looks like it's checking for directory traversal attempts. I'll need to carefully analyze the pattern to determine the exact attack type.
RA
Ranee
1 year ago
This regex is looking for some kind of attack, and based on the options, I'd say it's a directory traversal attack. I'll review the details to make sure I'm interpreting it correctly.
JA
Jacquelyne
1 year ago
Hmm, I'm not entirely sure about this one. I'll need to think it through carefully and consider the different options.
GE
German
1 year ago
I'm leaning towards option A. Identity Service Engine and Network Automation Platform seem familiar, but I can't remember the last one.
LE
Leonor
1 year ago
I feel pretty confident about this one. The key things to check are the account group's price list associations, the number of price lists linked to the account group, and whether the price lists are properly associated with the right community.
ER
Erick
1 year ago
I'm a bit confused. Is Exchange Online also an option for co-authoring? I thought it was mainly for email and calendaring.
ED
Edward
2 years ago
Definitely going with C on this one. The regex pattern is a dead giveaway for a directory traversal attempt. Better lock down those web server logs, John!
MI
Micaela
1 year ago
John's vigilance in monitoring the logs is crucial in detecting and preventing potential security threats.
CH
Christiane
1 year ago
We definitely need to tighten the security on our Apache web server to prevent these types of attacks.
WI
Willard
1 year ago
Yeah, that regex pattern is a clear indicator of a directory traversal attack. Good catch by John.
CA
Catina
1 year ago
I agree, C seems like the most likely option. Directory traversal attacks are quite common.
DA
Dannette
2 years ago
Haha, I bet John was scratching his head trying to figure this one out. Directory traversal attacks can be tricky to spot sometimes.
CR
Cristal
2 years ago
I'm not sure, but I think this could also be a parameter tampering attack. The regex pattern seems to be looking for malicious input in the URL parameters.
AZ
Azalee
2 years ago
This looks like a classic directory traversal attack to me. The regex pattern searches for suspicious directory traversal patterns, so C is the correct answer.
SH
Shawna
1 year ago
Yes, C) Directory Traversal Attack is the correct answer.
GE
Georgeanna
1 year ago
I agree, the regex pattern is specifically looking for directory traversal attacks.
MI
Millie
2 years ago
I believe it could also be a Parameter Tampering Attack, as the Regex pattern seems to indicate manipulation of parameters.
KA
Karrie
2 years ago
I agree with Freeman, the Regex pattern matches the Directory Traversal Attack.
FR
Freeman
2 years ago
I think the event log indicates a Directory Traversal Attack.