300-215 CBRFIR: Conducting Forensic Analysis and Incident Response Using Cisco Technologies for CybersecurityDemo

By Cisco · Question Mode

QuestionQ95

Incident Response Processes

Question Image

Refer to the exhibit. An engineer has received a ticket to analyze a recent breach affecting a company blog. Whenever users visit the blog, they see a message box. The blog lets users register, log in, create, and provide comments on various topics. Because of the application's legacy build, it stores user information in an outdated MySQL database. What recommended action should the engineer take?

  • A Validate input on arrival as strictly as possible.
  • B Implement a TLS 1.3 for external communications.
  • C Match the web server software for the front-end and back-end servers.
  • D Upgrade the MySQL database.
Explanation

Strict validation of untrusted input helps prevent malicious script content from being accepted through user-controlled fields such as blog comments. Stored malicious content can execute for every visitor when the application later renders it, producing the recurring message box.

Community Discussion

No comments yet. Be the first to start the discussion!