A security operations team is triaging high-priority alerts generated by a Network Intrusion Detection System (NIDS) placed between an enterprise web tier and an internal database subnet. The NIDS logs show multiple HTTP requests containing payload strings such as `UNION SELECT username, password_hash FROM user_credentials--`. Which of the following statements correctly interpret this network security monitoring alert and identify an appropriate remediation control? (Select TWO.)
- The alert indicates an attempted SQL injection attack targeting backend database storage.Cevap
- The security team should implement input validation and configure web application firewall rules to filter malicious database syntax.Cevap
- CThe alert represents a Cross-Site Scripting (XSS) attack designed to execute client-side scripts inside web browser sessions.
- DThe security team should reconfigure internal honeypots to act as inline filtering devices to drop the malicious network packets.
Cevap
The alert accurately identifies a SQL injection attack targeting database infrastructure, and the appropriate response involves implementing web application filtering and input validation controls.
The NIDS log entry contains classic SQL command syntax ('UNION SELECT'), which signifies a SQL injection attempt aimed at extracting confidential database records. To remediate web application layer attacks like SQL injection, organizations must implement input validation, prepared statements, and Web Application Firewall (WAF) filtering to detect and block malicious database queries.
Adım Adım Çözüm
Anahtar Kavram
Network Intrusion Alert Interpretation and Web Application Attack Remediation
Tahmini Süre:1m 30s