Exam 312-39 topic 1 question 45 discussion

p.457 The website's access logs contain "GET/" entry followed by the number of static files requested, like requests for CSS and JavaScript files. But the bots can't load these CSS and JavaScript files. When they make a request, only a "GET" entry will be displayed with no static files requested. These visits are invisible to Google Analytics reports. Thus, the security engineer requires access to logs from the website's server to detect bots.

The answer is B. Pag 457

Web server logs contain information about HTTP requests made to a web server, including the User-Agent field that identifies the client making the request. Bad Bot User-Agents are typically used by malicious bots to mimic legitimate user agents and evade detection by web application firewalls and other security measures. By analyzing web server logs, security analysts can identify patterns of traffic associated with known Bad Bot User-Agents and take steps to block or mitigate this traffic, such as implementing rate limiting or IP blocking. Some web application firewalls (WAFs) also use machine learning algorithms to analyze web server logs and detect suspicious traffic patterns associated with Bad Bot User-Agents.