Câu 32: 312-39V2: Certified SOC Analyst (CSA) v2

A SOC team at a major financial institution detects unauthorized access attempts on its web application. The security team reviews the logs to find the web application is compromised. To determine the exact attack technique used and implement necessary mitigation measures, the forensic investigators is assessing cookie attributes (such as HttpOnly, Secure, and SameSite) for security weaknesses, and track anomalous request patterns that deviate from normal user behavior. Which of the following attack vectors is the forensic team investigating in the above investigation?

1. A. SQL Injection
2. B. Cross-Site Scripting (XSS)
3. C. Man-in-the-Middle (MITM) Attack
4. D. Session Poisoning — đáp án hiện tại