QUESTION: 25

Refer to the exhibit. Which two determinations should be made about the attack from the Apache access logs? (Choose two.)

The attacker used r57 exploit to elevate their privilege.
The attacker uploaded the word press file manager trojan.
The attacker performed a brute force attack against word press and used sql injection against the backend database.
The attacker used the word press file manager plugin to upoad r57.php.
The attacker logged on normally to word press admin page.

Answer(s): C,D

Reveal Solution Next Question

An attacker embedded a macro within a word processing file opened by a user in an organization’s legal department. The attacker used this technique to gain access to confidential financial data. Which two recommendations should a security expert make to mitigate this type of attack? (Choose two.)