MENU
Which of the following attacks allows an attacker to access restricted directories, including application source code, configuration and critical system files, and to execute commands outside of the web server's root directory?
Suggested Answer: B
Get Premium CFA-001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
31 comments · newest first
TA
Tamra
11 months ago
I disagree, I think parameter tampering could also lead to similar issues.
FR
Francine
11 months ago
C is correct, but it's wild how many sites are vulnerable to this!
SH
Shenika
11 months ago
Wait, are we sure it's not D? Security misconfigurations are super common.
FL
Flo
12 months ago
I thought it was A at first, but C makes more sense.
IR
Ira
12 months ago
Definitely C, directory traversal is the one.
KA
Karan
12 months ago
I feel like unvalidated input could lead to various attacks, but I can't recall it being directly linked to accessing restricted files.
KA
Kaitlyn
1 year ago
Security misconfiguration sounds familiar, but I don't think it specifically allows access to restricted directories like the question describes.
ST
Stefanie
1 year ago
I remember practicing a similar question where we discussed how parameter tampering can lead to unauthorized access.
JE
Jesusa
1 year ago
I think this might be related to directory traversal attacks, but I'm not entirely sure.
SH
Sheldon
1 year ago
Okay, I've got this. The key is understanding that directory traversal lets you access files and directories outside the web server's root. That's the attack that matches the description in the question.
AN
Anika
1 year ago
I'm a bit confused by the wording of this question. I'll need to re-read it carefully and think through the different attack types to make sure I select the right one.
SE
Selma
1 year ago
Ah, I've seen this type of question before. I'm pretty confident the answer is C - directory traversal. That allows you to access restricted files and directories.
LO
Loren
1 year ago
Hmm, directory traversal seems like the most likely answer here. I'll need to review my notes on that attack to make sure I understand it fully.
VI
Viva
1 year ago
This looks like a tricky one. I'll need to think through the different types of attacks and how they work to figure out the right answer.
ST
Stefan
1 year ago
I feel like "Unstable" might be a tricky one, but I think it refers to tests that had issues rather than a complete failure.
IR
Irma
1 year ago
From what I recall, it's definitely risk and return. It makes sense since investors want to optimize their investment outcomes.
MI
Mignon
1 year ago
This seems like a straightforward question about email security features in Microsoft 365. I think the key is to identify the feature that can both remove the malicious emails and disable the PDF threat.
OL
Ollie
1 year ago
Okay, let's see. False imprisonment, malicious prosecution, invasion of privacy, and trespass on personal property all seem relevant. I'll have to weigh the options.
EL
Elke
2 years ago
Ah, the good old directory traversal. The classic way to sneak past the web server's defenses and explore the hidden corners of the system. Time to see what secrets are lurking in those restricted directories.
SH
Shaquana
1 year ago
I've used directory traversal before, it's a powerful attack method.
SH
Shaquana
1 year ago
C) Directory traversal
CE
Cecil
2 years ago
Directory traversal, for sure. This is the ultimate way to get the goods on the application. I'll be browsing through their config files and source code faster than a cheetah chasing a gazelle.
AN
Andra
2 years ago
C'mon, this is a no-brainer. Directory traversal is the way to go if you want to access those juicy restricted directories. It's like having a backstage pass to the web server's dirty secrets.
RO
Roxane
1 year ago
D) Security misconfiguration
BA
Barrie
1 year ago
C) Directory traversal
LA
Lavelle
1 year ago
B) Parameter/form tampering
ED
Edelmira
1 year ago
A) Unvalidated input
YO
Youlanda
2 years ago
Aha, directory traversal! This attack lets me snoop around where I'm not supposed to go. Time to take a stroll through the file system, shall we?
SH
Sheridan
2 years ago
I'm not sure, but I think it could also be D) Security misconfiguration.
TE
Tennie
2 years ago
I agree with Quentin. Directory traversal allows access to restricted directories.
QU
Quentin
2 years ago
I think the answer is C) Directory traversal.