Take a look at the following attack on a Web Server using obstructed URL:

4%63%2f%70 %61%73%73%77%64 The request is made up of:

?%2e%2e%2f%2e%2e%2f%2e%2f% = ../../../ ?%65%74%63 = etc ?%2f = / ?%70%61%73%73%77%64 = passwd How would you protect information systems from these attacks?

Question

Take a look at the following attack on a Web Server using obstructed URL:

4%63%2f%70 %61%73%73%77%64 The request is made up of:

?%2e%2e%2f%2e%2e%2f%2e%2f% = ../../../ ?%65%74%63 = etc ?%2f = / ?%70%61%73%73%77%64 = passwd How would you protect information systems from these attacks?

Accepted Answer

B. Create rules in IDS to alert on strange Unicode requests.

Answer

A. Configure Web Server to deny requests involving Unicode characters.

Answer

C. Use SSL authentication on Web Servers.

Answer

D. Enable Active Scripts Detection at the firewall and routers.

Take a look at the following attack on a Web Server using obstructed URL: 4%63%2f%70 %61%73%73%77%64 The request is made up of: ?%2e%2e%2f%2e%2e%2f%2e%2f% = ../../../ ?%65%74%63 = etc ?%2f = /…

Question

Options

How the community answered

Community Discussion