Question

An analyst is building a regex to search proxy logs for requests to a malicious domain that appears as both 'http://evil.com' and 'https://evil.com'. They write the pattern: https?://evil\.com. Which statement correctly describes how the '?' quantifier affects this match?

Accepted Answer

It makes the preceding character 's' optional, so the pattern matches both 'http://evil.com' and 'https://evil.com'.

Answer

It matches any single character in place of 's', so 'httpX://evil.com' would also match.

Answer

It requires one or more occurrences of 's', so only 'https://evil.com' matches.

Answer

It anchors the match to the start of the line, so only URLs at the beginning of a log entry match.