Examkin

Soru

Zorluk: KolayNetwork Security Monitoring and Alerting

A security analyst reviews an alert from a Network Intrusion Detection System (NIDS). The alert log captures an incoming HTTP request containing the payload: `http://example.com/login?user=admin' OR '1'='1'--`. Which of the following statements correctly identify the type of attack detected and an effective mitigation? (Select TWO.)

  1. The log entry captures a SQL injection attack targeting the backend database to bypass authentication.Cevap
  2. Implementing parameterized queries (prepared statements) within the web application prevents this attack type.Cevap
  3. C
    The log entry captures a Cross-Site Scripting (XSS) attack attempting to run malicious JavaScript in client browsers.
  4. D
    Deploying a perimeter firewall to block all inbound HTTP traffic mitigates the web application vulnerability.

Cevap

The alert indicates a SQL injection attack, and the proper mitigation is implementing parameterized queries in the web application code.
The payload `' OR '1'='1'--` is a classic SQL injection signature aimed at evaluating database queries to true to bypass authentication. Using parameterized queries in the application code ensures database drivers handle user inputs as parameter data rather than executable commands, rendering SQL injection ineffective.

Adım Adım Çözüm

1
Analyze the network security monitoring alert payload
Identified SQL syntax manipulation (`' OR '1'='1'--`) designed to evaluate boolean logic to true.
Recognizing command syntax patterns helps differentiate between web application attack types.
2
Match the attack pattern to the correct attack category
Confirmed the attack is SQL injection rather than client-side script execution (XSS).
SQL injection specifically targets relational database management systems integrated with web applications.
3
Identify the appropriate remediation control
Selected parameterized queries as the secure application development mitigation.
Parameterized queries ensure user input cannot modify the structure of pre-compiled SQL statements.

Anahtar Kavram

Network Intrusion Detection and Web Attack Analysis
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Network Security Monitoring and Alerting

Bu konudan daha fazla soru