nerdexam
GIAC

GSNA · Question #132

You work as a Computer Hacking Forensic Investigator for SecureNet Inc. You want to investigate Cross-Site Scripting attack on your company's Website. Which of the following methods of investigation…

The correct answer is A. Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the B. Look at the Web servers logs and normal traffic logging. D. Use a Web proxy to view the Web server transactions in real time and investigate any. You can use the following methods to investigate Cross-Site Scripting attack: 1. Look at the Web servers logs and normal traffic logging. 2. Use a Web proxy to view the Web server transactions in real time and investigate any communication with outside servers. 3. Review the…

Database & Application Auditing

Question

You work as a Computer Hacking Forensic Investigator for SecureNet Inc. You want to investigate Cross-Site Scripting attack on your company's Website. Which of the following methods of investigation can you use to accomplish the task?

Options

  • AReview the source of any HTML-formatted e-mail messages for embedded scripts or links in the
  • BLook at the Web servers logs and normal traffic logging.
  • CUse Wireshark to capture traffic going to the server and then searching for the requests going to
  • DUse a Web proxy to view the Web server transactions in real time and investigate any

How the community answered

(27 responses)
  • A
    74% (20)
  • C
    26% (7)

Explanation

You can use the following methods to investigate Cross-Site Scripting attack: 1. Look at the Web servers logs and normal traffic logging. 2. Use a Web proxy to view the Web server transactions in real time and investigate any communication with outside servers. 3. Review the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL to the company's site. Answer: C is incorrect. This method is not used to investigate Cross- Site Scripting attack.

Topics

#XSS investigation#web server logs#forensic analysis#cross-site scripting

Community Discussion

No community discussion yet for this question.

Full GSNA Practice