312-39 · Question #198
Jony, a security analyst, while monitoring IIS logs, identified events shown in the figure below. What does this event log indicate?
The correct answer is D. SQL Injection Attack. The IIS log events indicate a SQL Injection Attack. This is evident from the complex SQL queries present in the log, which include functions like “UNICODE”, “SUBSTRING”, and “MAX”. These functions are being used in a manner that suggests manipulation of strings and extraction…
Question
Jony, a security analyst, while monitoring IIS logs, identified events shown in the figure below. What does this event log indicate?
Exhibit
Options
- AParameter Tampering Attack
- BXSS Attack
- CDirectory Traversal Attack
- DSQL Injection Attack
How the community answered
(37 responses)- A5% (2)
- B11% (4)
- C3% (1)
- D81% (30)
Explanation
The IIS log events indicate a SQL Injection Attack. This is evident from the complex SQL queries present in the log, which include functions like “UNICODE”, “SUBSTRING”, and “MAX”. These functions are being used in a manner that suggests manipulation of strings and extraction of data, which are common tactics in SQL injection attacks. The use of specific characters like CHAR(97) and CHAR(108) within the queries is a technique often employed to bypass security mechanisms during materials and study guides provide extensive information on identifying and responding to various types of cyber attacks, including SQL Injection. These resources are essential for any security analyst to understand the intricacies of log analysis and attack identification.
Topics
Community Discussion
No community discussion yet for this question.