Q: 15
HOTSPOT -You are a security analyst tasked with hardening a web server. You have been given a list of HTTP payloads that were flagged as malicious.
INSTRUCTION - Giving the following attack signatures, determine the attack type, and then identify the associated remediation to prevent the attack in the future. If at any time you would like to bring back the initial state of the simulation, please click the Reset All button. Hot Area:
Your Answer
Discussion
Makes sense, the match between each payload type and remediation lines up with standard hardening controls. Stuff like parameterized queries for SQLi and input sanitization for XSS are pretty much textbook. Saw similar groupings in practice sets so I think this is right.
Great breakdown, really clear structure on each attack. Anyone else seeing similar payloads on practice sets?
Be respectful. No spam.
