Eccouncil 312-96 Exam - Topic 9 Question 35 Discussion

Actual exam question for Eccouncil's 312-96 exam

Question #: 35
Topic #: 9

[All 312-96 Questions]

Identify the type of attack depicted in the figure below:

ASQL injection attack

BParameter/form attack

CDirectory traversal attack

DSession fixation attack

Show Suggested Answer

Suggested Answer: C

by Irma at Jan 26, 2025, 08:14 AM

Limited Time Offer

25%

Off

Get Premium 312-96 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bettye

9 months ago

Surprised this is even a question, it's so obvious!

upvoted 0 times

...

Ulysses

9 months ago

I think it's a directory traversal attack, not SQL.

upvoted 0 times

...

Jose

10 months ago

Wait, are we sure? It could be a parameter attack too.

upvoted 0 times

...

Geraldo

10 months ago

Totally agree, it's definitely SQL injection!

upvoted 0 times

...

Tammy

10 months ago

Looks like an SQL injection to me.

upvoted 0 times

...

Lorrine

10 months ago

I'm leaning towards session fixation, but I don't remember seeing a question like this before. It’s tough to decide!

upvoted 0 times

...

Solange

11 months ago

The directory traversal attack seems like a possibility, but I feel like I need to double-check the definitions.

upvoted 0 times

...

Cherilyn

11 months ago

I remember something about parameter attacks, but I can't recall the specifics. This image is throwing me off a bit.

upvoted 0 times

...

Laquanda

11 months ago

I think this might be an SQL injection attack, but I'm not entirely sure. It looks familiar from our practice questions.

upvoted 0 times

...

Lore

11 months ago

This looks like a parameter/form attack to me. The image suggests that user input is being passed directly to the application without proper validation or sanitization.

upvoted 0 times

...

Dante

11 months ago

Based on the options provided, I think this is most likely a directory traversal attack. The image shows a path that could be used to access files outside the intended directory.

upvoted 0 times

...

Carylon

11 months ago

Hmm, I'm a bit unsure about this one. The image doesn't seem to clearly depict a specific attack type. I'll have to think it through carefully before answering.

upvoted 0 times

...

Catherin

11 months ago

I'm pretty sure this is a SQL injection attack, since the image shows some suspicious-looking code that could be used to inject malicious SQL commands.

upvoted 0 times

...

Skye

1 year ago

Wait, is this a trick question? Maybe the answer is just 'all of the above'? Ah, the joys of cybersecurity exams!

upvoted 0 times

Vi

1 year ago

User 3: I'm going with XSS as the type of attack shown in the figure.

upvoted 0 times

...

Adelle

1 year ago

User 2: I think it looks more like a SQL injection attack.

upvoted 0 times

...

Rolf

1 year ago

User 1: It's definitely a Cross-Site Request Forgery (CSRF) attack.

upvoted 0 times

...

Ayesha

1 year ago

Denial-of-Service, huh? I guess the attacker is trying to crash the server with too many requests. Gotta be option D.

upvoted 0 times

Tammara

1 year ago

Definitely option D. The goal is to make the server unavailable to users.

upvoted 0 times

...

Ayesha

1 year ago

I think you're correct. The attacker is overwhelming the server with requests.

upvoted 0 times

...

Cary

1 year ago

Yeah, that's right. Option D is Denial-of-Service attack.

upvoted 0 times

...

Sylvia

1 year ago

Ah, the good old XSS attack. That image is straight out of the hacker's playbook. I'm going with A.

upvoted 0 times

Dorthy

1 year ago

Yeah, XSS seems like the most fitting choice for that image.

upvoted 0 times

...

Kristel

1 year ago

I'm leaning towards XSS as well, it just seems more likely.

upvoted 0 times

...

Leonard

1 year ago

I think it could also be a CSRF attack, they can look similar.

upvoted 0 times

...

Page

1 year ago

I agree, that image definitely looks like an XSS attack.

upvoted 0 times

...

Ryan

1 year ago

I'm not sure, but I think it could also be a SQL injection attack.

upvoted 0 times

...

Sina

1 year ago

I agree with Judy, the figure looks like a CSRF attack.

upvoted 0 times

...

Francisca

1 year ago

Hmm, interesting. I'd say this is a SQL injection attack, trying to exploit the form inputs. Better go with option C on this one.

upvoted 0 times

Viola

1 year ago

User 2: No, I believe it's a SQL injection attack, option C.

upvoted 0 times

...

Thaddeus

1 year ago

User 1: I think it's a CSRF attack, option B.

upvoted 0 times

...

Judy

1 year ago

I think the attack is a Cross-Site Request Forgery (CSRF) attack.

upvoted 0 times

...

Izetta

1 year ago

This looks like a classic CSRF attack to me. The image shows a form submission that could easily be hijacked by an attacker. Answer B is the way to go.

upvoted 0 times