Halloween Special 2026! Get Up to 25% OFF Practice Questions! Limited Time - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

EC-Council 312-96 Exam - Topic 9 Question 35 Discussion

Posted by Irma on Jan 26, 2025 at 08:14 AM

Identify the type of attack depicted in the figure below:

Suggested Answer: C

Get Premium 312-96 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
37 comments · newest first
BE
Bettye 11 months ago
Surprised this is even a question, it's so obvious!
UL
Ulysses 11 months ago
I think it's a directory traversal attack, not SQL.
JO
Jose 11 months ago
Wait, are we sure? It could be a parameter attack too.
GE
Geraldo 12 months ago
Totally agree, it's definitely SQL injection!
TA
Tammy 12 months ago
Looks like an SQL injection to me.
LO
Lorrine 1 year ago
I'm leaning towards session fixation, but I don't remember seeing a question like this before. It’s tough to decide!
SO
Solange 1 year ago
The directory traversal attack seems like a possibility, but I feel like I need to double-check the definitions.
CH
Cherilyn 1 year ago
I remember something about parameter attacks, but I can't recall the specifics. This image is throwing me off a bit.
LA
Laquanda 1 year ago
I think this might be an SQL injection attack, but I'm not entirely sure. It looks familiar from our practice questions.
LO
Lore 1 year ago
This looks like a parameter/form attack to me. The image suggests that user input is being passed directly to the application without proper validation or sanitization.
DA
Dante 1 year ago
Based on the options provided, I think this is most likely a directory traversal attack. The image shows a path that could be used to access files outside the intended directory.
CA
Carylon 1 year ago
Hmm, I'm a bit unsure about this one. The image doesn't seem to clearly depict a specific attack type. I'll have to think it through carefully before answering.
CA
Catherin 1 year ago
I'm pretty sure this is a SQL injection attack, since the image shows some suspicious-looking code that could be used to inject malicious SQL commands.
SK
Skye 1 year ago
Wait, is this a trick question? Maybe the answer is just 'all of the above'? Ah, the joys of cybersecurity exams!
VI
Vi 1 year ago
↳ replying to Skye
User 3: I'm going with XSS as the type of attack shown in the figure.
AD
Adelle 1 year ago
↳ replying to Skye
User 2: I think it looks more like a SQL injection attack.
RO
Rolf 1 year ago
↳ replying to Skye
User 1: It's definitely a Cross-Site Request Forgery (CSRF) attack.
AY
Ayesha 2 years ago
Denial-of-Service, huh? I guess the attacker is trying to crash the server with too many requests. Gotta be option D.
TA
Tammara 1 year ago
↳ replying to Ayesha
Definitely option D. The goal is to make the server unavailable to users.
AY
Ayesha 1 year ago
↳ replying to Ayesha
I think you're correct. The attacker is overwhelming the server with requests.
CA
Cary 1 year ago
↳ replying to Ayesha
Yeah, that's right. Option D is Denial-of-Service attack.
SY
Sylvia 2 years ago
Ah, the good old XSS attack. That image is straight out of the hacker's playbook. I'm going with A.
DO
Dorthy 1 year ago
↳ replying to Sylvia
Yeah, XSS seems like the most fitting choice for that image.
KR
Kristel 1 year ago
↳ replying to Sylvia
I'm leaning towards XSS as well, it just seems more likely.
LE
Leonard 1 year ago
↳ replying to Sylvia
I think it could also be a CSRF attack, they can look similar.
PA
Page 1 year ago
↳ replying to Sylvia
I agree, that image definitely looks like an XSS attack.
RY
Ryan 2 years ago
I'm not sure, but I think it could also be a SQL injection attack.
SI
Sina 2 years ago
I agree with Judy, the figure looks like a CSRF attack.
FR
Francisca 2 years ago
Hmm, interesting. I'd say this is a SQL injection attack, trying to exploit the form inputs. Better go with option C on this one.
VI
Viola 1 year ago
↳ replying to Francisca
User 2: No, I believe it's a SQL injection attack, option C.
TH
Thaddeus 1 year ago
↳ replying to Francisca
User 1: I think it's a CSRF attack, option B.
JU
Judy 2 years ago
I think the attack is a Cross-Site Request Forgery (CSRF) attack.
IZ
Izetta 2 years ago
This looks like a classic CSRF attack to me. The image shows a form submission that could easily be hijacked by an attacker. Answer B is the way to go.
CH
Chantell 1 year ago
↳ replying to Izetta
I'm leaning towards XSS as the type of attack.
AL
Alpha 1 year ago
↳ replying to Izetta
No, I'm pretty sure it's a Denial-of-Service attack.
WA
Wava 1 year ago
↳ replying to Izetta
I think it could also be a SQL injection attack.
HA
Hailey 1 year ago
↳ replying to Izetta
I agree, it definitely looks like a CSRF attack.
0/2000 characters

Save Cancel