Which of the following attacks allows an attacker to access restricted directories, including application source code, configuration and critical system files, and to execute commands outside of the…

The correct answer is C. Directory traversal. Directory traversal (also called path traversal) is an attack where an attacker manipulates file path inputs - typically using sequences like '../' - to navigate outside the web server's intended root directory. This can expose sensitive files such as source code, configuration…

Submitted by carter_n· Apr 18, 2026Network Forensics

Question

Which of the following attacks allows an attacker to access restricted directories, including application source code, configuration and critical system files, and to execute commands outside of the web server's root directory?

Options

AUnvalidated input
BParameter/form tampering
CDirectory traversal
DSecurity misconfiguration

How the community answered

(17 responses)

A
6% (1)
B
6% (1)
C
88% (15)

Explanation

Directory traversal (also called path traversal) is an attack where an attacker manipulates file path inputs - typically using sequences like '../' - to navigate outside the web server's intended root directory. This can expose sensitive files such as source code, configuration files (which may contain credentials), and critical OS files. For example, a vulnerable URL might allow access to '/etc/passwd' on Linux or 'win.ini' on Windows. Proper input validation and server configuration are the primary defenses.

Topics

#Directory Traversal#Web Application Security#Vulnerability#Path Traversal

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice