An organization's critical data was exfiltrated from a computer system in a cyberattack. A cloud analyst wants to identify the root cause and is reviewing the following security logs of a software…

The correct answer is A. SQL injection. The log entries show multiple POST requests to a login page (/login.php) with the following patterns in the parameter values: u=administrator&p=or%201%20=1 u=admin&p=or%201%20=1 These requests indicate the use of SQL injection techniques. The use of keywords like is a common…

Security

Question

An organization’s critical data was exfiltrated from a computer system in a cyberattack. A cloud analyst wants to identify the root cause and is reviewing the following security logs of a software web application:

Which of the following types of attacks occurred?

Exhibit

Options

ASQL injection
BCross-site scripting
CReuse of leaked credentials
DPrivilege escalation

How the community answered

(45 responses)

A
87% (39)
B
7% (3)
C
2% (1)
D
4% (2)

Explanation

The log entries show multiple POST requests to a login page (/login.php) with the following patterns in the parameter values: u=administrator&p=or%201%20=1 u=admin&p=or%201%20=1 These requests indicate the use of SQL injection techniques. The use of keywords like is a common SQL injection pattern used to bypass authentication by manipulating SQL statements. This suggests that an attacker tried to manipulate the application's SQL queries to gain unauthorized access.

Topics

#SQL Injection#Web Application Security#Data Exfiltration#Security Logs Analysis

Community Discussion

No community discussion yet for this question.

Full CV0-004 Practice