CA1-005: CompTIA SecurityXDemo

By CompTIA · Question Mode

QuestionQ40

Security Engineering

A security administrator is examining the following code snippet from a website component:

Question Image

A review of the inc.tmp file reveals the following:

Question Image

Which of the following is the most likely cause of the inaccuracies?

  • A A content management solution plug-in has been exploited.
  • B A search engine's bots are being blocked at the firewall.
  • C The relevant stylesheet has become corrupted.
  • D The WAF is configured to be in transparent mode.
Explanation

The code uses WordPress hooks and obfuscated, externally stored content (inc.tmp) to inject output into page headers. Such concealed payload loading is consistent with malicious code introduced through an exploited content-management-system plug-in, which can alter site content and cause inaccurate results.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!