Eccouncil 312-39 Quiz 1 Topic 4 Questions 1-5

Question: 1

Identify the attack when an attacker by several trial and error can read the contents of a password file present in the restricted etc folder just by manipulating the URL in the browser as shown:

ADirectory Traversal Attack

BSQL Injection Attack

CDenial-of-Service Attack

DForm Tampering Attack

Show Answer

Question: 2

Sam , a security analyst with INFOSOL INC., while monitoring and analyzing IIS logs, detected an event matching regex /\\w*((\%27)|(\'))((\%6F)|o|(\%4F))((\%72)|r|(\%52))/ix.

What does this event log indicate?

ASQL Injection Attack

BParameter Tampering Attack

CXSS Attack

DDirectory Traversal Attack

Show Answer

Question: 3

An attacker, in an attempt to exploit the vulnerability in the dynamically generated welcome page, inserted code at the end of the company's URL as follows:

ACross-site Scripting Attack

BSQL Injection Attack

CDenial-of-Service Attack

DSession Attack

Show Answer

Question: 4

An attacker exploits the logic validation mechanisms of an e-commerce website. He successfully purchases a product worth $100 for $10 by modifying the URL exchanged between the client and the server.

Identify the attack depicted in the above scenario.

ADenial-of-Service Attack

BSQL Injection Attack

CParameter Tampering Attack

DSession Fixation Attack
Section: (none)
Explanation

Show Answer

Question: 5

Which alert should be given least priority as per effective alert triaging?

If the SIEM generates the following four alerts at the same time:

AI.Firewall blocking traffic from getting into the network alerts

BII.SQL injection attempt alerts

CIII.Data deletion attempt alerts

DIV.Brute-force attempt alerts

Show Answer

Eccouncil 312-39 Quiz:1 Topic:4 Questions:1-5