During an incident, a cybersecurity analyst found several entries in the web server logs that are related to an IP with a bad reputation . Which of the following would cause the analyst to further review the incident?
A. BadReputationIp – – [2019-04-12 10:43Z] “GET /etc/passwd” 403 1023
B. BadReputationIp – – [2019-04-12 10:43Z] “GET /index.html?src=../.ssh/id_rsa” 401 17044
C. BadReputationIp – – [2019-04-12 10:43Z] “GET /a.php?src=/etc/passwd” 403 11056
D. BadReputationIp – – [2019-04-12 10:43Z] “GET /a.php?src=../../.ssh/id_rsa” 200 15036
E. BadReputationIp – – [2019-04-12 10:43Z] “GET /favicon.ico?src=../usr/share/icons” 200 19064
CS0-002: CompTIA CySA+ ExamFULL Printable PDF and Software. VALID exam to help you PASS. |
 |
