212-89 › Web Application Incidents
This domain covers detection and response for attacks against web applications: CSRF, session fixation, SQL injection, XSS, and malicious HTTP payloads. Questions ask you to pick the log evidence or tool that confirms an attack, and to know which logging components—web server, application, and database—an incident handler must audit.
212-89 Web Application Incidents — All 59 Questions
Every question in this domain with answers and detailed explanations.