By injecting a script that forces subsequent visitors to transmit their session identifiers.

By exploiting a database flaw to extract stored authentication credentials from the server.

By utilizing an automated vulnerability scanner to bypass administrative endpoint access controls.

By manipulating URL parameters to redirect authenticated users to an external malicious domain.

The file was not altered between Monday and Friday because both hash digests are identical

The file was not altered, but an attacker may have viewed its contents without detection

The file was altered between Monday and Friday but the hash algorithm failed to detect the change

The file was encrypted between Monday and Friday, which preserved the original hash value

The file payroll.db was modified after the earlier hash was recorded and before the current hash was generated

The file payroll.db was copied to another location after the earlier hash was recorded and before the current hash was generated

The SHA256 algorithm produced a collision, generating two different digests for the same file contents

The file payroll.db was viewed by an unauthorized user after the earlier hash was recorded and before the current hash was generated

Hash verification confirms the file was not altered during the maintenance window, adding an integrity check layer alongside access controls

Hash verification confirms no unauthorized user accessed the file during the maintenance window, replacing the need for access control logs

Hash verification confirms the file was not altered during the maintenance window, eliminating the need for any additional detective controls

Hash verification confirms the file was encrypted correctly during the maintenance window, adding a confidentiality layer alongside access controls

An attacker who copies sensitive files without modifying them; adding accounting logs that record file access events would address this gap

An attacker who modifies sensitive files by altering their content; adding version control systems that track all file modifications would address this gap

An attacker who copies sensitive files without modifying them; adding encryption at rest that prevents unauthorized file access would address this gap

An attacker who copies sensitive files without modifying them; adding checksums that verify file integrity after each access would address this gap

Directory traversal, navigating outside the web root to access sensitive system credential files on the server

SQL injection, embedding database commands into HTTP requests to extract credential records from a backend database

Buffer overflow, sending oversized GET requests to overwrite adjacent server memory and execute unauthorized code

Reflected cross site scripting, injecting malicious scripts into GET request parameters that execute in visiting users' browsers

Unvalidated input enables SQL injection, allowing the adversary to bypass authentication and access the database without valid credentials

Unvalidated input enables a buffer overflow, allowing the adversary to overwrite adjacent memory and execute arbitrary code on the server

Unvalidated input enables stored cross site scripting, allowing the adversary to inject persistent malicious scripts affecting all future visitors

Unvalidated input enables directory traversal, allowing the adversary to navigate the server filesystem and retrieve sensitive configuration files

Type II stored cross site scripting, because the malicious script is saved on the server and executes in every visitor's browser when they load the page

Type I reflected cross site scripting, because the malicious script is embedded in a crafted link sent individually to each targeted victim

SQL injection, because the script tag syntax manipulates the forum's database query to return session data for all registered users

Directory traversal, because the script navigates the server's file structure to collect and transmit session files stored on the server

Buffer overflow, where excess input overwrites adjacent memory and can allow an adversary to execute unauthorized code on the system

SQL injection, where excess input embeds database commands that cause the application to query and expose unintended backend records

Directory traversal, where excess input navigates the filesystem and causes the application to open and execute restricted server files

Reflected cross site scripting, where excess input injects scripts that run in other users' browsers and expose their stored credentials

Encrypting the files at rest so contents are unreadable without the decryption key

Requiring multi-factor authentication so only authorized users can log into the network

Installing intrusion detection software to alert administrators when files are opened

Configuring a firewall to block external connections to the hospital's internal network