CertNexus Exam ITS-110 Topic 5 Question 44 Discussion

Actual exam question for CertNexus's ITS-110 exam

Question #: 44
Topic #: 5

A hacker enters credentials into a web login page and observes the server's responses. Which of the following attacks is the hacker attempting?

AAccount enumeration

BDirectory traversal

CBuffer overflow

DSpear phishing

Show Suggested Answer

Suggested Answer: A

by Brunilda at Sep 17, 2024, 07:51 AM

Limited Time Offer

25%

Off

Get Premium ITS-110 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Barney

26 days ago

I bet the hacker's password is 'password123'. That's the first thing I'd try.

upvoted 0 times

...

Dulce

27 days ago

Spear phishing? Really? This is clearly an attempt at account enumeration. The hacker is just fishing for valid usernames.

upvoted 0 times

Nicolette

17 hours ago

Actually, I believe it's account enumeration.

upvoted 0 times

...

Sylvie

8 days ago

No, it's definitely spear phishing.

upvoted 0 times

...

Isidra

13 days ago

I think it's account enumeration.

upvoted 0 times

...

Mitsue

1 months ago

Nah, it's gotta be a buffer overflow. The hacker is probably trying to exploit a vulnerability in the login page's code.

upvoted 0 times

Julio

18 hours ago

C: I agree with the user comment, it's most likely a buffer overflow attack to exploit a coding vulnerability.

upvoted 0 times

...

Quentin

3 days ago

B: No way, it's definitely directory traversal. They're trying to access files they shouldn't be able to.

upvoted 0 times

...

Jules

10 days ago

A: I think it's actually account enumeration. The hacker is trying to see if the credentials are valid.

upvoted 0 times

...

Janna

1 months ago

But wouldn't observing server responses be more related to account enumeration?

upvoted 0 times

...

Rozella

1 months ago

I disagree, I believe it's directory traversal.

upvoted 0 times

...

Jose

2 months ago

I think it's a directory traversal attack. The hacker is probably trying to access restricted directories on the server.

upvoted 0 times

...

Desire

2 months ago

Definitely account enumeration. The hacker is trying to guess valid usernames by observing the server's responses.

upvoted 0 times

Winfred

29 days ago

C: That makes sense, they're observing the server's responses.

upvoted 0 times

...

Demetra

1 months ago

B: Yeah, the hacker is trying to guess valid usernames.

upvoted 0 times

...

Josphine

1 months ago

A: I think it's account enumeration.

upvoted 0 times

...

Janna

2 months ago

I think the hacker is attempting account enumeration.

upvoted 0 times

...