Eccouncil Exam 312-39 Topic 6 Question 88 Discussion

Actual exam question for Eccouncil's 312-39 exam

Question #: 88
Topic #: 6

[All 312-39 Questions]

Jony, a security analyst, while monitoring IIS logs, identified events shown in the figure below.

What does this event log indicate?

AParameter Tampering Attack

BXSS Attack

CDirectory Traversal Attack

DSQL Injection Attack

Show Suggested Answer

Suggested Answer: C

by Shawna at Aug 08, 2024, 09:28 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Michael

2 months ago

Ah, the classic 'guess the attack' game. I'll just sit back and watch the security experts duke it out.

upvoted 0 times

...

Justa

2 months ago

Looks like Jony needs to upgrade his web server security. Maybe he should try turning it off and on again?

upvoted 0 times

...

Tesha

2 months ago

You guys are all wrong. This is a classic SQL Injection Attack. The attacker is trying to exploit the web application's database.

upvoted 0 times

...

Tula

2 months ago

I disagree with both of you. This is clearly an XSS Attack, where the attacker is trying to inject malicious code into the web application.

upvoted 0 times

Yolande

1 months ago

C) Directory Traversal Attack

upvoted 0 times

...

Maira

1 months ago

B) XSS Attack

upvoted 0 times

...

Brynn

1 months ago

A) Parameter Tampering Attack

upvoted 0 times

...

3 months ago

The event log looks like a Directory Traversal Attack to me. That image is pretty clear about the request trying to navigate outside the web root directory.

upvoted 0 times

Kizzy

1 months ago

I believe it's a SQL Injection Attack. The request appears to be trying to manipulate the database query to retrieve sensitive information.

upvoted 0 times

...

Jordan

1 months ago

I'm leaning towards XSS Attack. The request looks like it's trying to inject malicious scripts into the web application.

upvoted 0 times

...

Niesha

1 months ago

I think it could also be a Parameter Tampering Attack. The request seems to be manipulating parameters to access unauthorized data.

upvoted 0 times

...

Phyliss

3 months ago

I agree, it does seem like a Directory Traversal Attack. The request is trying to access files outside the intended directory.

upvoted 0 times

...

Viva

3 months ago

I think it might be a SQL Injection Attack.

upvoted 0 times

...