CompTIA
SY0-701 · Question #732
A forensic engineer determines that the root cause of a compromise is a SQL injection attack. Which of the following should the engineer review to identify the command used by the threat actor?
The correct answer is B. Application log. To identify the exact command or input used during a SQL injection attack, the application log is the most relevant. It records inputs, errors, and processing activities within the application layer.
Submitted by ahmad_uae· Mar 6, 2026Security Operations
Question
A forensic engineer determines that the root cause of a compromise is a SQL injection attack. Which of the following should the engineer review to identify the command used by the threat actor?
Options
- AMetadata
- BApplication log
- CSystem log
- DNetflow log
How the community answered
(51 responses)- A6% (3)
- B59% (30)
- C10% (5)
- D25% (13)
Explanation
To identify the exact command or input used during a SQL injection attack, the application log is the most relevant. It records inputs, errors, and processing activities within the application layer.
Community Discussion
No community discussion yet for this question.