nerdexam
CompTIACompTIA

SY0-701 · Question #442

SY0-701 Question #442: Real Exam Question with Answer & Explanation

The correct answer is B: Review WAF logs for evidence of command injection.. The code provided (DROP DATABASE WebShopOnline) suggests that the database was deliberately dropped on a specific date (January 30, 2023). This could potentially be the result of a command injection attack, where an attacker inserts malicious code to manipulate or destroy

Submitted by helene.fr· Mar 6, 2026Security Operations

Question

A company's online shopping website became unusable shortly after midnight on January 30, 2023. When a security analyst reviewed the database server, the analyst noticed the following code used for backing up data: Which of the following should the analyst do next?

Options

  • ACheck for recently terminated DBAs.
  • BReview WAF logs for evidence of command injection.
  • CScan the database server for malware.
  • DSearch the web server for ransomware notes.

Explanation

The code provided (DROP DATABASE WebShopOnline) suggests that the database was deliberately dropped on a specific date (January 30, 2023). This could potentially be the result of a command injection attack, where an attacker inserts malicious code to manipulate or destroy

Community Discussion

No community discussion yet for this question.

Full SY0-701 PracticeBrowse All SY0-701 Questions