While looking through the IIS log file of a web server, you find the following entries: What is evident from this log file?

The correct answer is D. SQL injection is possible. IIS log files record all HTTP requests to a web server. SQL injection attacks are identifiable in logs by the presence of SQL keywords embedded in URL query strings or POST data - such as SELECT, UNION, INSERT, DROP, OR 1=1, and similar constructs appearing in request…

Submitted by brentm· Apr 18, 2026Network Forensics

Question

While looking through the IIS log file of a web server, you find the following entries:

What is evident from this log file?

Exhibit

Options

AWeb bugs
BCross site scripting
CHidden fields
DSQL injection is possible

How the community answered

(37 responses)

A
11% (4)
B
22% (8)
C
5% (2)
D
62% (23)

Explanation

IIS log files record all HTTP requests to a web server. SQL injection attacks are identifiable in logs by the presence of SQL keywords embedded in URL query strings or POST data - such as SELECT, UNION, INSERT, DROP, OR 1=1, and similar constructs appearing in request parameters. When such patterns appear in IIS logs, they indicate that SQL injection attempts have been made against the web application. The other options (web bugs, cross-site scripting, hidden fields) would leave different signatures and are not typically identified primarily through IIS log analysis of URL patterns.

Topics

#SQL injection#Log analysis#Web server logs#Attack detection

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice