300-215 · Question #61
A new zero-day vulnerability is discovered in the web application. Vulnerability does not require physical access and can be exploited remotely. Attackers are exploiting the new vulnerability by…
The correct answer is A. Validate input upon submission. E. Enable file integrity monitoring. Validate input upon submission. Implementing strict input validation (and output encoding) immediately mitigates the injection flaw being exploited, closing the vector even before a vendor patch is available. Enable file integrity monitoring. Detecting unexpected deletions or…
Question
A new zero-day vulnerability is discovered in the web application. Vulnerability does not require physical access and can be exploited remotely. Attackers are exploiting the new vulnerability by submitting a form with malicious content that grants them access to the server. After exploitation, attackers delete the log files to hide traces. Which two actions should the security engineer take next? (Choose two.)
Options
- AValidate input upon submission.
- BBlock connections on port 443.
- CInstall antivirus.
- DUpdate web application to the latest version.
- EEnable file integrity monitoring.
How the community answered
(53 responses)- A79% (42)
- B2% (1)
- C6% (3)
- D13% (7)
Explanation
Validate input upon submission. Implementing strict input validation (and output encoding) immediately mitigates the injection flaw being exploited, closing the vector even before a vendor patch is available. Enable file integrity monitoring. Detecting unexpected deletions or tampering with log files ensures you can spot future cover-up attempts and retain forensic evidence.
Topics
Community Discussion
No community discussion yet for this question.