exam questions

Exam SY0-601 All Questions

View all questions & answers for the SY0-601 exam

Exam SY0-601 topic 1 question 180 discussion

Actual exam question from CompTIA's SY0-601
Question #: 180
Topic #: 1
[All SY0-601 Questions]

A security analyst is reviewing web-application logs and finds the following log:

Which of the following attacks is being observed?

  • A. Directory traversal
  • B. XSS
  • C. CSRF
  • D. On-path attack
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Vishnuks
Highly Voted 2 years, 10 months ago
Answer is A (Directory Traversal)
upvoted 28 times
stoneface
2 years, 10 months ago
Agreed
upvoted 20 times
DirtyDann
1 year, 7 months ago
thank you for your service, stoneface
upvoted 15 times
...
...
...
securityexam101
Highly Voted 2 years, 9 months ago
Selected Answer: A
../../ directory traversal 1=1 SQL so A
upvoted 20 times
user82
2 years, 2 months ago
I see .. but no /
upvoted 3 times
BlueRanger12
2 years, 2 months ago
Yes is it, because %2F in ASCII URL Format is /
upvoted 21 times
...
...
...
Pesos
Most Recent 1 year, 2 months ago
D = D Directory Traversal = Dots ../../../
upvoted 1 times
...
RevolutionaryAct
1 year, 10 months ago
Selected Answer: A
https://www.w3schools.com/tags/ref_urlencode.ASP / is %2F = is %3D ? is %3F .. The double dot is an indicator that you can move back from this location. That is, you're in a folder inside of another folder. Once you start moving around within your computer, you can use that information for reference. https://www.redhat.com/sysadmin/navigating-filesystem-linux-terminal#:~:text=The%20single%20dot%20is%20a,use%20that%20information%20for%20reference.
upvoted 11 times
...
ApplebeesWaiter1122
1 year, 11 months ago
Selected Answer: A
..... ...... ......
upvoted 2 times
...
death_notes
2 years, 4 months ago
TAKE IT FROM ME answer is A
upvoted 2 times
...
carpathia
2 years, 7 months ago
Selected Answer: A
https://owasp.org/www-community/attacks/Path_Traversal
upvoted 3 times
...
zharis
2 years, 8 months ago
Selected Answer: B
Cross-site scripting inserts a malicious script that appears to be part of the trusted website
upvoted 1 times
zharis
2 years, 8 months ago
.....but directory traversal which involves threat actor submitting a request for a file outside the web servers root directory by submitting a path to navigate to the parent directory looks more convincing given the URL included in the question.
upvoted 1 times
...
...
ylatif
2 years, 8 months ago
Cross-Site Request Forgery (CSRF) attacks execute unauthorized actions on web applications, via an authenticated end-user’s connection.
upvoted 1 times
...
RonWonkers
2 years, 9 months ago
Selected Answer: A
It is A, directory traversal
upvoted 1 times
...
Dachosenone
2 years, 9 months ago
Selected Answer: A
It is directory transversal
upvoted 2 times
...
banditring
2 years, 9 months ago
"A common symptom of this attack is the presence of a variation of the change to parent directory instruction (i.e., ../) in a URL, such as ..%c0%af or ..%5c." and it is showing this in this picture
upvoted 6 times
...
derfnick
2 years, 10 months ago
A Directory traversal
upvoted 5 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...