Log Analysis Mini-Challenge

What type of attack is shown in the log?

• SQL Injection

• Cross-site Scripting

• Brute Force

• Session Hijacking

What does HTTP status code 401 mean?

• Forbidden

• Unauthorized

• OK

• Not Found

Which IP address appears suspicious in the log?

• Which IP address appears suspicious in the log?

• 127.0.0.1

• 192.168.0.5

• 172.16.0.10

What is a common defense against brute-force attacks?

• Account lockout

• Captcha skipping

• Allow multiple attempts

• Port forwarding

How many failed login attempts are shown before success?

• 2

• 1

• 3

• 4

What kind of attack is being attempted?

• Directory Traversal

• • Denial of Service

• CSRF

• Phishing

Which file is commonly targeted in Unix-based systems?

• /root/file.txt

• /bin/bash

• /etc/passwd

• /dev/null

What does HTTP 403 indicate?

• Not Found

• Forbidden

• Unauthorized

• Bad Gateway

What is a preventive measure for this attack?

• Caching

• Input validation

• Allow .exe files

• Disable TLS

Why might someone target /windows/system32?

• It contains core system files

• It contains backups

• It logs login attempts

• It’s a firewall directory