Hacking Web Servers CEH Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   You are performing a penetration test on a web server. The client has given you permission to test but has asked you to minimize the chance of crashing the server. You have identified a potential SQL injection in a login form. Which approach best balances impact demonstration and safety?

   • ASkip the injection test to avoid any risk.
   • BUse Metasploit's sqlmap auxiliary module with default settings.
   • CManually submit a payload like ' OR '1'='1' to bypass authentication.
   • DUse sqlmap with the --batch and --risk=1 options to automate the injection test.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A web server is suffering from a distributed denial-of-service (DDoS) attack that floods the network link with UDP traffic. The server's firewall is currently allowing all UDP traffic. Which immediate action is most effective to mitigate the attack while preserving legitimate services?

   • ARate-limit UDP traffic per source IP and block UDP ports that are not required.
   • BBlock all UDP traffic at the firewall.
   • CDisable the server's UDP services entirely.
   • DIncrease the server's bandwidth to absorb the traffic.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security team is conducting a red team exercise against a web server. The team has a limited time window and wants to identify exploitable vulnerabilities quickly. They have access to Nikto, Nessus, and Metasploit. Which workflow is most efficient for finding and exploiting a vulnerability?

   • ARun Nessus only and then manually exploit the findings
   • BRun Metasploit directly with a broad set of exploits
   • CRun Nikto for quick web checks, then use Nessus for a deeper scan, and finally use Metasploit to exploit any confirmed vulnerabilities
   • DRun Nikto only and use its built-in exploit features
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   During a penetration test, you need to identify all web servers on a large network segment and then determine which ones are running outdated software. You have limited time and need to be efficient. Which tool combination is most effective?

   • AUse Metasploit's auxiliary/scanner/http/http_version against the entire subnet.
   • BUse Wireshark to capture traffic and identify web servers.
   • CUse Nmap to discover open ports 80/443, then run Nikto against the discovered hosts.
   • DUse a single Nikto scan against the entire subnet.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A web server logs show a rapid series of HTTP requests with URLs containing patterns like /../../../../etc/passwd and /..%2f..%2fwindows/win.ini. The requests come from a single IP address. Which immediate countermeasure is most effective to stop this attack?

   • AInstall a new SSL certificate to encrypt traffic between clients and the server.
   • BBlock the IP address at the firewall and enable URL normalization rules in the web application firewall.
   • CRestart the web server service to clear the current connections and reset the application state.
   • DDisable directory listing in the web server configuration.
   Reveal Solution Discussion Select an answer first