GCIH Web TestEngine Demo

Q73 Single choice

During the identification phase of a potential incident, you examine the logs of a web server, which are full of lines like the one displayed below. During the preparation phase, what measures would you take to mitigate the risk of attacks that produced these logs?

192.168.56.1 - - [08/Aug/2011:09:35:48 -0400] "GET /?_task=<sCRipT>alert(document.cookie)</sCRipT>
HTTP/1.1" 200 5418 "-" "Googlebot/2.1 (+http://www.google.com/bot.html)"

A
Use parameterized stored procedures in the web application that accesses the database
B
Configure the file robots.txt of the web server properly to prevent spidering
C
Filter disallowed input characters for each possible encoding scheme at the application server
D
Apply a timestamp within the variable or create random hashes using a strong algorithm

GCIH Web TestEngine demo