nerdexam
Cisco

350-701 · Question #672

Which attack gives unauthorized access to files on the web server?

The correct answer is B. path traversal. A path traversal attack exploits vulnerabilities in web applications to gain unauthorized access to files and directories outside of the intended web root directory.

Submitted by carlos_mx· Mar 30, 2026Network Security

Question

Which attack gives unauthorized access to files on the web server?

Options

  • ADHCP snooping
  • Bpath traversal
  • Cbroadcast storm
  • Ddistributed DoS

How the community answered

(52 responses)
  • A
    2% (1)
  • B
    88% (46)
  • C
    8% (4)
  • D
    2% (1)

Why each option

A path traversal attack exploits vulnerabilities in web applications to gain unauthorized access to files and directories outside of the intended web root directory.

ADHCP snooping

DHCP snooping is a security feature on network switches to prevent rogue DHCP servers and enforce client-server relationships, not an attack method for accessing server files.

Bpath traversalCorrect

A path traversal attack (also known as directory traversal) allows an attacker to access files or directories that are stored outside the web root folder. By manipulating file paths with sequences like "../", attackers can trick the application into accessing arbitrary files on the server, potentially leading to unauthorized file viewing or execution.

Cbroadcast storm

A broadcast storm is a network phenomenon where excessive broadcast traffic consumes network bandwidth, leading to performance degradation or network collapse, not unauthorized file access.

Ddistributed DoS

A distributed DoS (DDoS) attack aims to disrupt service by overwhelming a target with traffic from multiple sources, not to gain unauthorized access to specific files.

Concept tested: Web application vulnerabilities (path traversal)

Source: https://www.owasp.org/www-community/attacks/Path_Traversal

Topics

#path traversal#web server vulnerability#web application security

Community Discussion

No community discussion yet for this question.

Full 350-701 Practice