GCIA: GIAC Certified Intrusion AnalystDemo

Question

Adam is a Security Administrator for Umbrella and has been assigned a project to test the company’s network security. He created a webpage to discuss test progress with employees interested in following the testing. Visitors could click a company icon to indicate the test’s progress. Adam successfully embedded a keylogger and also added statistics to the webpage. The firewall protects the network effectively and permits only strict Internet access.

How was security compromised, and how did the firewall respond?

A The attack was Cross Site Scripting and the firewall blocked it.
B Security was not compromised as the webpage was hosted internally.
C The attack was social engineering and the firewall did not detect it.
D Security was compromised as keylogger is invisible for firewall.

Explanation

A trusted-looking webpage that persuades employees to interact with embedded malicious functionality is a social-engineering attack. Firewalls enforce network-traffic rules; they do not inherently detect a keylogger embedded in a webpage or prevent users from being deceived into interacting with it.

GCIA: GIAC Certified Intrusion AnalystDemo

AstroTutor

Notes

Readiness

QuestionQ192

Community Discussion