Exam CAS-004 topic 1 question 323 discussion

B. Validate the server input and append the input to the base directory path. The provided URL http://comptia.org/../../../../etc/shadow suggests a directory traversal attack attempt. The attacker is trying to navigate to sensitive system files by using "../" to traverse up the directory structure. To defend against this type of attack, the network administrator should validate the server input. By doing so, the administrator can ensure that user input is properly sanitized and does not allow navigation outside of the intended directory structure.

B *seems* right until you think about it. Why would traversing from "comptia.org/new/default/path" be any harder than from "comptia.org/"? The new path does not imply any additional controls in place to actually prevent or mitigate the attack. C on the other hand implies that even if the directory traversal occurs, there are no default credentials and therefore the attacker must still provide credentials

B. is the opposite of need to do, but guessing "validate" could mean "sanitize" then... Definitions of "validate" verb: check or prove the validity or accuracy of (something),

I'm going with C on this one. B sounds plausible until you read the rest. This is a directory path attack, why would you want to append anything to the base directory? I'm choosing C over D because MFA may not directly address the issue of directory traversal attacks or other malicious activity targeting the web server. MFA is effective in protecting against credential-based attacks, such as password guessing or phishing, but it may not prevent attacks that exploit vulnerabilities in the web server or its applications.