Câu 48: 312-39V2: Certified SOC Analyst (CSA) v2

A healthcare organization's SIEM detects a series of unusual HTTP requests targeting its patient portal. The requests originate from a foreign IP address and occur during non-business hours. The methods used are primarily TRACE and OPTIONS, which are rarely seen in normal web traffic. The SIEM correlates these events with an increase in reconnaissance activity on other servers within the same subnet. What is the primary security concern with TRACE and OPTIONS requests?

1. A. They expose information about server-supported methods and request headers — đáp án hiện tại
2. B. They can be used to upload malicious payloads directly to the server
3. C. They make Distributed Denial of Service (DDoS) attack easier
4. D. They allow attackers to bypass authentication controls