GIAC Exam GPEN Topic 9 Question 54 Discussion

Actual exam question for GIAC's GPEN exam

Question #: 54
Topic #: 9

[All GPEN Questions]

You work as a Computer Hacking Forensic Investigator for SecureNet Inc. You want to investigate Cross-Site Scripting attack on your company's Website. Which of the following methods of investigation can you use to accomplish the task?

Each correct answer represents a complete solution. Choose all that apply.

AReview the source of any HTML-formatted e-mail messages for embedded scripts or links in the URL to the company's site.

BLook at the Web servers logs and normal traffic logging.

CUse a Web proxy to view the Web server transactions in real time and investigate any communication with outside servers.

DUse Wireshark to capture traffic going to the server and then searching for the requests going to the input page, which may give log of the malicious traffic and the IP address of the source.

Show Suggested Answer

Suggested Answer: C

by Leslee at Aug 06, 2024, 09:14 AM

Limited Time Offer

25%

Off

Get Premium GPEN Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Natalie

11 hours ago

I agree with Lonna, looking at the Web servers logs is also important.

upvoted 0 times

...

Lonna

2 days ago

I think we should review the source of any HTML-formatted e-mail messages.

upvoted 0 times

...