An attacker is trying to upload a Windows executable file to the website behind ASM. The attacker changes the file name of the executable file from ad_b.exe to adb.jpg. Which two actions should the ASM Specialist take to block the attack? (Choose two answers)

• A. create "/data/adb.exe " URL entry in the Disallowed URL List
• B. check "Disallow File Upload of Executables" on the file upload parameter
• C. check "Disallowed file upload content detected" in Block settings
• D. create "img" and "exe" type in Disallowed File Types List
• E. check "illegal file type" in Block settings

Correct Answer: B,C

Brave-Dump Clients Votes