What is the primary purpose of obfuscating JavaScript code in web-based malware?

To ensure compatibility with all browsers

To make the code harder to analyze and detect

To reduce the file size of the script

To improve the performance of the script

What is the primary impact of a successful cross-site scripting (XSS) attack on a web application?

Modification of database records without authentication

Denial of service by overwhelming the server with requests

Execution of malicious scripts in a victim's browser

Unauthorized access to the web server's file system

What is the primary goal of correlating evidence from multiple sources during a web attack investigation?

To reconstruct the attack timeline

To reduce the amount of evidence

A forensic investigator is reviewing the IIS logs of a compromised web server. The logs show a long series of requests to /product.aspx?id=1, /product.aspx?id=2, and so on, followed by a request to /product.aspx?id=1' AND '1'='1. Later, a request to /admin/upload.aspx with a POST containing a .aspx file appears. Which attack pattern do these logs most clearly indicate?

Cross-site scripting (XSS) followed by session hijacking

Brute-force login attempt followed by privilege escalation

Directory traversal followed by remote code execution

SQL injection followed by file upload of a web shell

EC-CouncilCertified Security Specialist

Domain 6Objective 4

Investigating Web Attacks ECSS Practice Questions (Page 7)

Part of the Digital Forensics Investigations domain, which makes up ~20% of our current practice bank.

53questions here

11free pages

9concepts

Questions 31–35

31foundation · easy
What is the primary purpose of obfuscating JavaScript code in web-based malware?
Select an answer first
32foundation · easy
What is the primary impact of a successful cross-site scripting (XSS) attack on a web application?
Select an answer first
33foundation · easy
What is the primary goal of correlating evidence from multiple sources during a web attack investigation?
Select an answer first
34application · easy
You are analyzing Apache access logs and notice a series of requests to /index.php?page=../../../../etc/passwd. What type of attack does this pattern indicate?
Select an answer first
35application · medium
A forensic investigator is reviewing the IIS logs of a compromised web server. The logs show a long series of requests to /product.aspx?id=1, /product.aspx?id=2, and so on, followed by a request to /product.aspx?id=1' AND '1'='1. Later, a request to /admin/upload.aspx with a POST containing a .aspx file appears. Which attack pattern do these logs most clearly indicate?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ECSS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “ECSS” is a trademark of its owner, used for identification only.

Investigating Web Attacks ECSS Practice Questions (Page 7)

Questions 31–35

What is the primary purpose of obfuscating JavaScript code in web-based malware?

What is the primary impact of a successful cross-site scripting (XSS) attack on a web application?

What is the primary goal of correlating evidence from multiple sources during a web attack investigation?

You are analyzing Apache access logs and notice a series of requests to /index.php?page=../../../../etc/passwd. What type of attack does this pattern indicate?

Keep studying — Digital Forensics Investigations