Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 28 of 166
Free Preview · 166 of 552 · questions 1–166 of 552 are free. Sign up free to sync your progress across devices.
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
C. Installation - NO - That’s after exploitation, when malware/backdoors get installed. We're seeing the exploit now. ❌ ✅ D. Exploitation - Yes — the attacker is sending malicious payloads with PHP code to trigger code execution and write a new file = Exploitation phase. ✅
While it is true that the attacker could be exploiting a vulnerability in the server to write and execute PHP code, the act of writing the malicious PHP code and creating the PHP file itself is more in line with an installation action. The attacker is trying to establish a persistent tool on the system (such as a backdoor or web shell), which corresponds to the installation stage of the attack.
I also think it's C .The goal of the action described in the question is "install a new PHP file" on the web server.