MENU
You work as a Computer Hacking Forensic Investigator for SecureNet Inc. You want to investigate Cross-Site Scripting attack on your company's Website. Which of the following methods of investigation can you use to accomplish the task?
Each correct answer represents a complete solution. Choose all that apply.
Suggested Answer: C
Get Premium GPEN Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
CE
Ceola
10 months ago
Wait, can Wireshark really pinpoint the source like that?
AL
Alline
11 months ago
D is a must for tracking down that malicious traffic!
CH
Chana
11 months ago
C sounds useful, but is it really necessary?
TY
Ty
11 months ago
A and B are solid choices!
MO
Mozell
11 months ago
Definitely check the web server logs!
RO
Rosita
11 months ago
Wireshark could definitely help capture traffic, but I wonder if it’s too complex for this specific scenario. I need to double-check my notes on that.
NI
Nieves
12 months ago
Using a web proxy sounds familiar, but I can't recall if it directly relates to XSS investigations. I might need to think that one through.
AU
Audra
12 months ago
I remember practicing with web server logs in a similar question; it seems like a solid method to track down suspicious activity.
LE
Lenora
12 months ago
I think reviewing the source of HTML emails could be useful, but I'm not entirely sure if it's the best first step for a Cross-Site Scripting attack.
CA
Cathrine
12 months ago
This question is testing our knowledge of web security and forensics. I think the key is to look for any suspicious activity or communication, whether that's in email, web server logs, or network traffic. Gotta be thorough to catch that cross-site scripting attack!
RO
Rosendo
1 year ago
Okay, I've got this. Reviewing email sources for embedded scripts, looking at web server logs, using a web proxy, and capturing traffic with Wireshark - those are all solid techniques to investigate a cross-site scripting attack. I feel confident I can apply these methods effectively.
RO
Rodolfo
1 year ago
Hmm, I'm a bit unsure about this one. I know cross-site scripting is a common web vulnerability, but I'm not super familiar with the forensic investigation process. I'll need to think through the different methods carefully to make sure I select the right ones.
RA
Raylene
1 year ago
This looks like a straightforward question on investigating a cross-site scripting attack. I think I can handle this - reviewing email sources, checking web server logs, and using a web proxy and Wireshark all seem like good approaches to identify the attack.
VI
Virgie
1 year ago
Ah, I know this topic well from my quality management course. A quality audit is all about identifying areas for improvement, so I'm pretty confident the right answer is B.
SA
Sabrina
1 year ago
Wait, is this a test or a spy novel? Either way, I'm game to play the part of the hacking investigator.
VA
Valentin
1 year ago
C) Use a Web proxy to view the Web server transactions in real time and investigate any communication with outside servers.
LE
Leonora
1 year ago
B) Look at the Web servers logs and normal traffic logging.
AN
Antonio
1 year ago
A) Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL to the company's site.
TA
Tanesha
1 year ago
This is like a choose-your-own-adventure for cybersecurity nerds! I'm ready to crack the case.
KE
Keneth
1 year ago
C) Use a Web proxy to view the Web server transactions in real time and investigate any communication with outside servers.
ER
Erick
1 year ago
B) Look at the Web servers logs and normal traffic logging.
GA
Gaynell
1 year ago
A) Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL to the company's site.
CL
Clement
1 year ago
Cross-Site Scripting, huh? Time to dust off my web forensics skills and get to work.
YA
Yasuko
1 year ago
Hmm, let's see... A, B, C, and D? Gotta love a question that keeps us on our toes!
CA
Catrice
1 year ago
B) Look at the Web servers logs and normal traffic logging.
EL
Elliott
1 year ago
A) Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL to the company's site.
AL
Alfred
1 year ago
Wow, this is a tricky one! I'm gonna have to put on my detective hat for this one.
DA
Dante
2 years ago
Using Wireshark to capture traffic going to the server sounds like a good idea too.
NA
Natalie
2 years ago
I agree with Lonna, looking at the Web servers logs is also important.
LO
Lonna
2 years ago
I think we should review the source of any HTML-formatted e-mail messages.