Exam 312-39 topic 1 question 7 discussion

Actual exam question from ECCouncil's 312-39

Question #: 7
Topic #: 1

Identify the attack when an attacker by several trial and error can read the contents of a password file present in the restricted etc folder just by manipulating the URL in the browser as shown: http://www.terabytes.com/process.php./../../../../etc/passwd

A. Directory Traversal Attack
B. SQL Injection Attack
C. Denial-of-Service Attack
D. Form Tampering Attack

Show Suggested Answer

Suggested Answer: A 🗳️

by mihaibeuca at Oct. 16, 2022, 2:03 p.m.

Comments

Submit Cancel

Berro_b

2 months, 2 weeks ago

Selected Answer: A

A- Module 2 ,page 122

upvoted 1 times

...

basil10

11 months, 4 weeks ago

a is correct

upvoted 2 times

...

froi2222

1 year, 8 months ago

A. Directory Traversal Attack In a directory traversal attack, the attacker attempts to access files and directories that are outside the web application's root directory by manipulating the URL. In this case, the attacker is trying to access the password file by using "../" to navigate to the "/etc" directory.

upvoted 2 times

...