Exam SY0-601 topic 1 question 583 discussion

Actual exam question from CompTIA's SY0-601

Question #: 583
Topic #: 1

A junior security analyst is reviewing web server logs and identifies the following pattern in the log file:

http://comptia.org/../../../etc/passwd

Which of the following types of attacks is being attempted and how can it be mitigated?

A. XSS; implement a SIEM
B. CSRF; implement an IPS
C. Directory traversal; implement a WAF
D. SQL injection; implement an IDS

Show Suggested Answer

Suggested Answer: C 🗳️

by ApplebeesWaiter1122 at July 26, 2023, 6:41 p.m.

Comments

Submit Cancel

ApplebeesWaiter1122

Highly Voted 1 year, 11 months ago

*On Exam, Taken On July 31, 2023*

upvoted 18 times

Abdulaa

1 year, 10 months ago

I am going to take the exam on 14 of august any recomendation?

upvoted 2 times

...

ApplebeesWaiter1122

Highly Voted 1 year, 11 months ago

Selected Answer: C

To mitigate the directory traversal attack, implementing a WAF (Web Application Firewall) is a good approach. A WAF can inspect and filter incoming HTTP requests, blocking requests that contain suspicious or malicious patterns like "../" which are used in directory traversal attacks. By doing so, the WAF helps protect the web server from unauthorized access to sensitive files outside the web server's intended directory structure.

upvoted 9 times

...

russian

Most Recent 1 year, 2 months ago

Selected Answer: C

.../ gives it out - Directory traversal

upvoted 1 times

...