ExamTopics Logo
Mail Us[email protected]
Menu
Cisco Discussions
exam questions

Exam 210-255 All Questions

View all questions & answers for the 210-255 exam
Go to Exam

Exam 210-255 topic 1 question 4 discussion

Actual exam question from Cisco's 210-255
Question #: 4
Topic #: 1
[All 210-255 Questions]

You see 100 HTTP GET and POST requests for various pages on one of your webservers. The user agent in the requests contain php code that, if executed, creates and writes to a new php file on the webserver. Which category does this event fall under as defined in the Diamond Model of Intrusion?

  • A. delivery
  • B. reconnaissance
  • C. action on objectives
  • D. installation
  • E. exploitation
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by vld at March 22, 2020, 9:48 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
joseph267
2 years, 4 months ago
those are not fases of the diamond model of intrusion
upvoted 1 times
...
Holapozy
4 years, 9 months ago
The answer should be Installation, In the exam Delivery is no more among the options
upvoted 1 times
...
BarnDawg
4 years, 11 months ago
What is the actual correct answer then? I've seen it two other places that suggest it is installation? Kiplan, did you get it right in the exam? What answer did you put please? I think it's because the question is misleading. I think it describes what has happened, then describes what will happen if the code is executed, and then it asks what this event is called, but it doesn't specify if the event it is referring to is what HAS happened (delivery) or what WILL happen (installation).
upvoted 1 times
...
CCNPTT
4 years, 11 months ago
I think "installation" is correct. The question is written to create a doubt, but, the "event" is not referred to the "100 HTTP GET and POST requests" but instead to the "creates and writes to a new php file on the webserver".
upvoted 1 times
...
Kiplan
4 years, 11 months ago
question was in the exam
upvoted 1 times
erahimov
4 years, 11 months ago
and which answer do you choose?
upvoted 1 times
...
...
CCNPTT
4 years, 11 months ago
Agree with vld, Delivery is the right answer. The code has not been yet downloaded so it cannot be installed.
upvoted 2 times
...
vld
5 years, 1 month ago
Correct answer - A. delivery
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago