GAQM CFA-001 Exam - Topic 4 Question 85 Discussion

Actual exam question for GAQM's CFA-001 exam

Question #: 85
Topic #: 4

Which of the following attacks allows an attacker to access restricted directories, including application source code, configuration and critical system files, and to execute commands outside of the web server's root directory?

AUnvalidated input

BParameter/form tampering

CDirectory traversal

DSecurity misconfiguration

Show Suggested Answer

Suggested Answer: B

by Edda at May 29, 2024, 09:49 AM

Limited Time Offer

25%

Off

Get Premium CFA-001 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tamra

9 months ago

I disagree, I think parameter tampering could also lead to similar issues.

upvoted 0 times

...

Francine

9 months ago

C is correct, but it's wild how many sites are vulnerable to this!

upvoted 0 times

...

Shenika

10 months ago

Wait, are we sure it's not D? Security misconfigurations are super common.

upvoted 0 times

...

Flo

10 months ago

I thought it was A at first, but C makes more sense.

upvoted 0 times

...

Ira

10 months ago

Definitely C, directory traversal is the one.

upvoted 0 times

...

Karan

10 months ago

I feel like unvalidated input could lead to various attacks, but I can't recall it being directly linked to accessing restricted files.

upvoted 0 times

...

Kaitlyn

10 months ago

Security misconfiguration sounds familiar, but I don't think it specifically allows access to restricted directories like the question describes.

upvoted 0 times

...

Stefanie

11 months ago

I remember practicing a similar question where we discussed how parameter tampering can lead to unauthorized access.

upvoted 0 times

...

Jesusa

11 months ago

I think this might be related to directory traversal attacks, but I'm not entirely sure.

upvoted 0 times

...

Sheldon

11 months ago

Okay, I've got this. The key is understanding that directory traversal lets you access files and directories outside the web server's root. That's the attack that matches the description in the question.

upvoted 0 times

...

Anika

11 months ago

I'm a bit confused by the wording of this question. I'll need to re-read it carefully and think through the different attack types to make sure I select the right one.

upvoted 0 times

...

Selma

11 months ago

Ah, I've seen this type of question before. I'm pretty confident the answer is C - directory traversal. That allows you to access restricted files and directories.

upvoted 0 times

...

Loren

11 months ago

Hmm, directory traversal seems like the most likely answer here. I'll need to review my notes on that attack to make sure I understand it fully.

upvoted 0 times

...

Viva

11 months ago

This looks like a tricky one. I'll need to think through the different types of attacks and how they work to figure out the right answer.

upvoted 0 times

...

Stefan

11 months ago

I feel like "Unstable" might be a tricky one, but I think it refers to tests that had issues rather than a complete failure.

upvoted 0 times

...

Irma

11 months ago

From what I recall, it's definitely risk and return. It makes sense since investors want to optimize their investment outcomes.

upvoted 0 times

...

Mignon

11 months ago

This seems like a straightforward question about email security features in Microsoft 365. I think the key is to identify the feature that can both remove the malicious emails and disable the PDF threat.

upvoted 0 times

...

Ollie

11 months ago

Okay, let's see. False imprisonment, malicious prosecution, invasion of privacy, and trespass on personal property all seem relevant. I'll have to weigh the options.

upvoted 0 times

...

Elke

1 year ago

Ah, the good old directory traversal. The classic way to sneak past the web server's defenses and explore the hidden corners of the system. Time to see what secrets are lurking in those restricted directories.

upvoted 0 times

Shaquana

1 year ago

I've used directory traversal before, it's a powerful attack method.

upvoted 0 times

...

Shaquana

1 year ago

C) Directory traversal

upvoted 0 times

...

Cecil

1 year ago

Directory traversal, for sure. This is the ultimate way to get the goods on the application. I'll be browsing through their config files and source code faster than a cheetah chasing a gazelle.

upvoted 0 times

...

Andra

1 year ago

C'mon, this is a no-brainer. Directory traversal is the way to go if you want to access those juicy restricted directories. It's like having a backstage pass to the web server's dirty secrets.

upvoted 0 times