CompTIA PenTest+ (PT0-001) — Question 103

Given the following:
http://example.com/download.php?id-.../.../.../etc/passwd
Which of the following BEST describes the above attack?

Answer options

• A. Malicious file upload attack
• B. Redirect attack
• C. Directory traversal attack
• D. Insecure direct object reference attack

Correct answer: C

Explanation

The correct answer is C, as the URL demonstrates a directory traversal attack, where the attacker attempts to access sensitive files by manipulating the path. The other options do not apply: A involves uploading files, B involves redirecting users, and D refers to directly accessing restricted objects without proper authorization.