During an Incident, a Cybersecurity Analyst Found Several Entries in the Web

question 47

Multiple Choice

During an incident, a cybersecurity analyst found several entries in the web server logs that are related to an IP with a bad reputation. Which of the following would cause the analyst to further review the incident?

• A) BadReputationIp - - [2019-04-12 10:43Z] "GET /etc/passwd" 403 1023
• B) BadReputationIp - - [2019-04-12 10:43Z] "GET /index.html?src=../.ssh/id_rsa" 401 17044
• C) BadReputationIp - - [2019-04-12 10:43Z] "GET /a.php?src=/etc/passwd" 403 11056
• D) BadReputationIp - - [2019-04-12 10:43Z] "GET /a.php?src=../../.ssh/id_rsa" 200 15036
• E) BadReputationIp - - [2019-04-12 10:43Z] "GET /favicon.ico?src=../usr/share/icons" 200 19064

---

Definitions:

Observable Action

An action or behavior that can be seen and measured, often used in performance assessments or research to evaluate outcomes.

Measurable Criterion

A quantifiable or assessable standard used to evaluate the success or effectiveness of a program or project.

Training Objective

The specific goal or outcome that a training program aims to achieve, which guides the development, delivery, and evaluation of the training.

RFP

Request For Proposal, a document that solicits bid proposals from potential suppliers or contractors for a specific project or service.