MENU
You are the incident response manager at a regional bank. While performing routine auditing of web application logs, you find several attempted login submissions that contain the following strings:
What kind of attack has occurred?
Suggested Answer: C
Get Premium 312-49 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
34 comments · newest first
CE
Ceola
11 months ago
Wait, are we sure it’s not cross-site scripting?
DA
Daniel
11 months ago
Definitely SQL injection, no doubt about it!
MA
Maybelle
11 months ago
I’m not so sure, could it be a buffer overflow?
PA
Pamela
12 months ago
Totally agree, those strings are classic signs!
LA
Laurel
12 months ago
Looks like an SQL injection attempt.
EL
Elke
1 year ago
I feel like I've seen similar questions before, and SQL injection seems to fit the pattern of what we're looking at.
RU
Ruthann
1 year ago
This question reminds me of a practice test where we discussed cross-site scripting, but I don't think that's the right answer here.
ER
Eric
1 year ago
I'm not entirely sure, but I think buffer overflow attacks usually involve more than just login attempts.
AR
Ariel
1 year ago
I remember studying SQL injection attacks, and those strings look suspiciously like they could be part of a SQL query.
BE
Benton
1 year ago
I'm a bit confused here. The question mentions "attempted login submissions" but the answer choices don't seem to match that. I'll need to think this through carefully before selecting an answer.
NG
Nguyet
1 year ago
Okay, I got this. The login strings contain special characters and SQL keywords, so this is definitely a SQL injection attempt. I'll select option A and move on.
VI
Vincent
1 year ago
Hmm, the login strings seem suspicious, but I'm not sure if this is a SQL injection or some other type of attack. I'll need to review my notes on different web application vulnerabilities.
CH
Chara
1 year ago
This looks like a classic SQL injection attack. I'll analyze the login strings and try to identify any SQL injection patterns.
TA
Tammy
1 year ago
This is a tricky one, but the login strings with the apostrophes and SQL keywords are a clear sign of a SQL injection attack. I'm confident option A is the correct answer.
LA
Lashawn
1 year ago
I'm a little confused by the "display vpnv4 bgp routing-table" option. That doesn't seem to match the syntax I'm familiar with for BGP commands. I'll probably eliminate that one and focus on the other three choices.
SH
Sherell
1 year ago
Hmm, this looks like a tricky one. I'll need to think carefully about the data types and stream operations to get the right answer.
RE
Refugia
1 year ago
I think I know this one - the default setting for OpenLDAP without an access directive is usually "read access for everyone".
SH
Shalon
1 year ago
Hmm, this is a tricky one. The features seem a bit limited, so a more complex model like a decision tree might be able to capture the underlying patterns better. But the Naive Bayesian classifier could also work well, especially if the features are truly independent. I'd need to do some more analysis to decide.
FR
Franchesca
2 years ago
I think it's definitely SQL injection, the strings match the pattern.
NA
Naomi
2 years ago
I'm not sure, but it could also be a cross-site scripting attack.
FR
Freeman
2 years ago
Haha, I bet the bank's IT team is having a field day with this one. Probably SQL injection, though I can't rule out cross-site request forgery either.
AM
Amira
2 years ago
The IT team must be working hard to address this security issue.
LI
Lindsey
2 years ago
I agree, it could be SQL injection or cross-site request forgery.
LE
Leatha
2 years ago
I agree with Catalina, the strings look like SQL injection attempts.
LA
Laura
2 years ago
Hmm, I'm not sure. Could be a buffer overflow, but the login context makes me think it's more likely a SQL injection attack.
CA
Catalina
2 years ago
I think it's a SQL injection attack.
ES
Esteban
2 years ago
I'm leaning towards cross-site scripting (XSS) here. Those funny-looking strings could be part of an XSS payload.
CH
Cherilyn
2 years ago
We should investigate further to confirm if it's indeed a cross-site scripting attack.
CH
Cherilyn
2 years ago
I agree, those strings look suspicious. It could definitely be a cross-site scripting attack.
DW
Dwight
2 years ago
Definitely SQL injection, those strings look like an attempt to exploit the application's input validation.
DA
Dan
2 years ago
I think it's actually SQL injection. The attackers are trying to inject malicious SQL code into the login form.
CH
Charlette
2 years ago
C) Cross-site scripting
PA
Paola
2 years ago
Yes, I agree. The strings in the login submissions definitely look like they are trying to manipulate the SQL queries.
CE
Cecily
2 years ago
A) SQL injection