exam questions

Exam SY0-601 All Questions

View all questions & answers for the SY0-601 exam

Exam SY0-601 topic 1 question 667 discussion

Actual exam question from CompTIA's SY0-601
Question #: 667
Topic #: 1
[All SY0-601 Questions]

During an incident response, a security analyst observes the following log entry on the web server:



Which of the following BEST describes the type of attack the analyst is experiencing?

  • A. SQL injection
  • B. Cross-site scripting
  • C. Pass-the-hash
  • D. Directory traversal
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
loginnow123
Highly Voted 1 year, 6 months ago
Selected Answer: D
Seeing ../../../ is a giveaway for directory traveral
upvoted 6 times
...
Abdulaa
Most Recent 1 year, 2 months ago
23 APR 2024 I took my exam and i passed with 776, this question was on my exam this website was very helpful, study it and understood the answer. GL.
upvoted 4 times
...
Malkhofash
1 year, 5 months ago
../../ is the key to answer directly the question directory traversal
upvoted 4 times
...
sujon_london
1 year, 10 months ago
Selected Answer: D
the attacker manipulates the URL parameters by using "../" sequences or absolute file paths to navigate to parent directories and access arbitrary files and directories on the URL parameter "show" contains multiple "../" sequences, indicating an attempt to navigate to parent directories. The attacker is trying to access the "/etc/passwd" file, which is a commonly targeted file that stores user account information on Unix-based systems.
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...