Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS) — Question 61

A security specialist notices 100 HTTP GET and POST requests for multiple pages on the web servers. The agent in the requests contains PHP code that, if executed, creates and writes to a new PHP file on the webserver. Which event category is described?

Answer options

• A. reconnaissance
• B. action on objectives
• C. installation
• D. exploitation

Correct answer: D

Explanation

The correct answer is D because the requests are attempting to execute PHP code that could lead to unauthorized actions on the server, indicative of exploitation. Options A and C do not fit because reconnaissance refers to gathering information and installation pertains to placing malware, neither of which directly relates to the execution of code. Option B, action on objectives, implies achieving a goal, which isn't specific to the described situation.