SY0-701 · Question #531
A security analyst is reviewing logs and discovers the following: Which of the following should be used to best mitigate this type of attack?
The correct answer is A. Input sanitization. The log entry in the image suggests that the system is potentially under attack, as the User-Agent header contains what looks like a shell command: ${/bin/sh/id}. This type of activity may indicate an attempted command injection attack, where an attacker is trying to execute…
Question
A security analyst is reviewing logs and discovers the following:
Which of the following should be used to best mitigate this type of attack?
Options
- AInput sanitization
- BSecure cookies
- CStatic code analysis
- DSandboxing
How the community answered
(44 responses)- A84% (37)
- B5% (2)
- C2% (1)
- D9% (4)
Explanation
The log entry in the image suggests that the system is potentially under attack, as the User-Agent header contains what looks like a shell command: ${/bin/sh/id}. This type of activity may indicate an attempted command injection attack, where an attacker is trying to execute shell commands via a vulnerable web application.
Community Discussion
No community discussion yet for this question.