A company's web server was recently compromised due to an unpatched vulnerability. The administrator wants to implement a layered defense to prevent similar incidents. Which combination of countermeasures is most effective?

Disabling unused services and changing the default port

Using a VPN for all administrative access and disabling remote management

Regular patching, web application firewall, and continuous log monitoring

Installing antivirus and changing the administrator password

A security consultant is performing a vulnerability assessment of a web server that hosts a customer portal. The assessment must be completed within a limited time window, and the server is business-critical. The consultant has access to both Nikto and Nessus. Which approach best balances thoroughness and the need to avoid service disruption?

Run Nessus with the default policy, which includes active checks

Run only Nikto because it is faster and less likely to cause issues

Run Metasploit auxiliary scanners to avoid detection

Run Nikto with safe checks and then Nessus with a non-intrusive policy

During a penetration test, you have completed footprinting of a target web server and identified that it runs Apache 2.4.41 on a Linux host. Your next step is to enumerate the server's enabled modules and virtual hosts to find potential attack surfaces. Which action best fits the enumeration phase of the web server hacking methodology?

Launch Metasploit's apache_mod_cgi_bash_env_exec module to test for shellshock.

Run Nikto with the -C all option to enumerate CGI directories and known vulnerable files.

Send a crafted HTTP OPTIONS request to list all allowed methods for the root directory.

Use the Apache HTTP Server's mod_info or mod_status pages if exposed, and query DNS for vhost records.

After a brute-force attack on the admin login page of a web application, the security team wants to reduce the risk of successful credential stuffing without degrading the user experience for legitimate users. Which control best meets this requirement?

Implement account lockout after three failed attempts

Increase the password minimum length to 20 characters

Disable the login page during off-peak hours

Deploy a Web Application Firewall (WAF) with rate limiting and bot detection

EC-CouncilCertified Ethical Hacker

Domain 5Objective 1

Hacking Web Servers CEH Practice Questions (Page 3)

Part of the Web Application Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

6concepts

Questions 11–15

11application · medium
A company's web server was recently compromised due to an unpatched vulnerability. The administrator wants to implement a layered defense to prevent similar incidents. Which combination of countermeasures is most effective?
Select an answer first
12foundation · easy
Which attack exploits insufficient input validation to access files outside the web root directory, such as /etc/passwd?
Select an answer first
13expert · hard
A security consultant is performing a vulnerability assessment of a web server that hosts a customer portal. The assessment must be completed within a limited time window, and the server is business-critical. The consultant has access to both Nikto and Nessus. Which approach best balances thoroughness and the need to avoid service disruption?
Select an answer first
14application · medium
During a penetration test, you have completed footprinting of a target web server and identified that it runs Apache 2.4.41 on a Linux host. Your next step is to enumerate the server's enabled modules and virtual hosts to find potential attack surfaces. Which action best fits the enumeration phase of the web server hacking methodology?
Select an answer first
15application · medium
After a brute-force attack on the admin login page of a web application, the security team wants to reduce the risk of successful credential stuffing without degrading the user experience for legitimate users. Which control best meets this requirement?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Hacking Web Servers CEH Practice Questions (Page 3)

Questions 11–15

A company's web server was recently compromised due to an unpatched vulnerability. The administrator wants to implement a layered defense to prevent similar incidents. Which combination of countermeasures is most effective?

Which attack exploits insufficient input validation to access files outside the web root directory, such as /etc/passwd?

After a brute-force attack on the admin login page of a web application, the security team wants to reduce the risk of successful credential stuffing without degrading the user experience for legitimate users. Which control best meets this requirement?

Keep studying — Web Application Hacking