During a security audit of a web application, suspicious activity indicative of a directory traversal attack is detected in the server logs. The attack appears to exploit vulnerabilities to gain…

Question

Options

• ATo identify potential loopholes in server hardware configurations
• BTo optimize network bandwidth and reduce latency
• CTo determine the extent of unauthorized access and data compromise
• DTo enhance user experience on the web application

• A
  6% (3)
• B
  4% (2)
• C
  79% (37)
• D
  11% (5)

Explanation

According to the CHFI v11 Network and Web Attacks domain, a directory traversal attack (also known as path traversal) is a web-based attack in which an attacker manipulates input parameters (such as ../ sequences) to access files and directories outside the intended web root. This can expose sensitive resources such as configuration files, credentials, source code, system files, and application logs. The primary forensic objective when investigating a directory traversal attack is to determine the scope and impact of unauthorized access. CHFI v11 emphasizes that investigators must analyze web server logs, application logs, and access records to identify: Which files or directories were accessed Whether sensitive or confidential data was exposed The time frame of the attack The attacker's source IP and request patterns Whether data was viewed, downloaded, or potentially modified Understanding the extent of data compromise is critical for incident response, regulatory notification, damage assessment, and legal proceedings. It also helps determine whether further attacks (such as privilege escalation or lateral movement) may have occurred following the traversal exploit.

No community discussion yet for this question.