MENU
Attackers can manipulate variables that reference files with "dot-dot-slash (./)" sequences and their variations such as http://www.juggyDoy.corn/GET/process.php./././././././././etc/passwd.
Identify the attack referred.
Suggested Answer: B
Get Premium CFA-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
42 comments · newest first
TA
Talia
11 months ago
Wow, I didn't know it could be that easy to access sensitive files!
UL
Ulysses
11 months ago
I thought file injection was more common, but this makes sense.
AL
Alberto
11 months ago
Wait, are we sure it's not SQL Injection?
LO
Lorean
12 months ago
Agreed, those dot-dot-slash sequences are a giveaway!
KE
Kendra
12 months ago
That's definitely a directory traversal attack.
MY
Myra
12 months ago
I’m a bit confused. I thought SQL injection was more about manipulating database queries, but I guess there could be some overlap? Still, directory traversal feels more accurate here.
RO
Rodrigo
1 year ago
I recall something similar from our last practice exam. Directory traversal was definitely mentioned there, so I’m leaning towards that being the correct answer.
SA
Sang
1 year ago
I'm not entirely sure, but I feel like it could also relate to file injection. We did some practice questions on that, but this one seems more specific.
DA
Dahlia
1 year ago
I think this is about directory traversal, right? I remember studying how attackers use those dot-dot-slash sequences to access restricted files.
EV
Evan
1 year ago
I've seen this type of attack before. The key is the "../" sequence in the URL, which allows an attacker to access files outside the intended directory. Definitely going with directory traversal for this one.
LA
Lanie
1 year ago
I'm a bit unsure about this one. The question mentions file manipulation, but the options include SQL injection and XSS as well. I'll need to think this through carefully before selecting an answer.
MA
Maile
1 year ago
Okay, this one seems straightforward. The URL structure with the "../" suggests a directory traversal attack, so I'll go with option A.
LO
Louisa
1 year ago
Hmm, the question mentions "dot-dot-slash" sequences, so I'm pretty sure the answer is directory traversal. I just need to double-check the options to be sure.
KA
Kayleigh
1 year ago
This looks like a classic directory traversal attack. I'll carefully analyze the URL structure and look for the "../" sequences to identify the correct answer.
BA
Basilia
1 year ago
Okay, I think I've got a strategy here. I'd first look for any employees who are being paid more than their approved wages, then check the entrance logs to see if there are any employees who are being paid but not showing up to work.
RO
Rozella
1 year ago
Okay, I remember learning about cgroups in my Linux class. I believe they do provide a way to limit a container's access to CPU, memory, and other host resources. I'll mark that as the answer.
LA
Lashanda
1 year ago
Wow, someone really needs to clean up their URL. '/etc/passwd'? That's just asking for trouble!
VO
Vonda
1 year ago
B) SQL Injection
DO
Dong
1 year ago
Yeah, that's definitely a directory traversal attack.
JE
Jerry
1 year ago
A) Directory traversal
FE
Felicia
1 year ago
File injection, eh? That's a creative guess, but I think the 'dot-dot-slash' clue gives it away as a directory traversal attack.
AD
Adelina
1 year ago
Exactly, the 'dot-dot-slash' is a common technique used in directory traversal attacks.
RA
Raina
1 year ago
A) Directory traversal
LE
Leigha
1 year ago
You're right, the 'dot-dot-slash' clue is a giveaway for directory traversal.
AZ
Azalee
1 year ago
B) SQL Injection
TI
Tien
1 year ago
You're right, it's a directory traversal attack.
NO
Norah
1 year ago
A) Directory traversal
KA
Kaycee
1 year ago
A) Directory traversal
AM
Amina
2 years ago
XSS? Come on, this is all about accessing sensitive files, not injecting code into a webpage.
MI
Mitzie
2 years ago
Haha, nice try with the SQL injection option, but this is clearly about navigating the file system, not the database.
ET
Ethan
1 year ago
B) SQL Injection
ET
Ethan
1 year ago
A) Directory traversal
VI
Victor
1 year ago
B) SQL Injection
VI
Victor
1 year ago
A) Directory traversal
DE
Devorah
2 years ago
I'm not sure, but I think it could also be File injection.
CE
Celestina
2 years ago
Definitely directory traversal! Those dot-dot-slash sequences are a classic giveaway.
CA
Caitlin
1 year ago
It's a common technique to access unauthorized files.
ST
Stefan
1 year ago
A) Directory traversal
LO
Loreta
1 year ago
Yes, attackers use those sequences to navigate through directories.
NA
Nakisha
1 year ago
A) Directory traversal
NA
Nana
2 years ago
I agree with Tommy, because the example given involves manipulating file paths.
TO
Tommy
2 years ago
I think the attack referred is Directory traversal.