While using Wire shark to investigate complaints of users being unable to login to a web application, you come across an HTTP POST submitted through your web application. The contents of the POST are listed below. Based on what you see below, which of the following would you recommend to prevent future damage to your database?

Question

Accepted Answer

D. Use https to prevent hackers from inserting malware If an HTTP POST containing login credentials or session data is readable in Wireshark, the web application is transmitting data in plaintext over unencrypted HTTP, making it trivially interceptable by an attacker on the network. Implementing HTTPS encrypts all traffic in transit using TLS, preventing attackers from capturing and reading credentials or session tokens via packet capture. This directly addresses the interception attack vector that Wireshark visibility reveals.

Answer

A. Use ssh to prevent a denial of service attack SSH is a protocol for secure remote shell access and is not applicable to protecting web application login traffic or mitigating denial-of-service attacks against databases.

Answer

B. Sanitize user inputs to prevent injection attacks Sanitizing user inputs defends against injection attacks such as SQL injection, but does not address the underlying problem of credentials being transmitted in unencrypted plaintext over HTTP.

Answer

C. Authenticate users to prevent hackers from using your database Requiring user authentication enforces access control but does not protect credentials that are already being exposed in plaintext during transmission and captured via network analysis.

While using Wire shark to investigate complaints of users being unable to login to a web application, you come across an HTTP POST submitted through your web application. The contents of the POST…

Question

Exhibit

Options

How the community answered

Why each option

Topics

Community Discussion