An external host is attacking your network. The host sends an HTTP request to a Web server, but
does not include the version of HTTP in the request.
Which type of attack is being performed?
A.
signature-based attack
B.
application identification
C.
anomaly
D.
fingerprinting
Explanation:
Reference;https://services.netscreen.com/restricted/sigupdates/nsmupdates/HTML/HTTP%3AINVALID%3AMSNG-HTTP-VER.html
C Right answer : see : http://signatures.juniper.net/documentation/signatures/HTTP%3AINVALID%3AMSNG-HTTP-VER.html
HTTP: Missing HTTP Version
This protocol anomaly triggers when it detects an HTTP request with an invalid HTTP version string in the HTTP version string position of a Web request. This can indicate an invalid request (such as invalid white-space within a URI) or potential malicious activity (such as shell activity).
References
URL: http://www.faqs.org/rfcs/rfc2616.html
URL: http://www.ietf.org/rfc/rfc2396.txt
0
0