312-49V11: Computer Hacking Forensic InvestigatorDemo

Question

An organization’s web application was compromised, enabling an attacker to download the entire database. During the initial log review, a forensic investigator identified several occurrences of the string “%2e%2e%2f”. What type of attack might have caused this breach?

A Cross-Site Scripting (XSS) attack.
B Directory Traversal attack.
C SQL Injection attack.
D Brute Force attack.

Explanation

%2e%2e%2f is URL encoding for ../, which moves up one directory in a file path. Attackers use these sequences to traverse outside an application’s intended directory structure and access unauthorized files, potentially including database files or backups.

312-49V11: Computer Hacking Forensic InvestigatorDemo

AstroTutor

Notes

Readiness

QuestionQ155

Community Discussion