Hacking Web Servers CEH Practice Questions (Page 4)

Questions 16–20

1. 16expert · hard

   A web server administrator is tasked with hardening a server that runs both a public website and a sensitive internal application. The administrator wants to reduce the attack surface while maintaining functionality. Which action is most effective?

   • ADisable all unused modules and services on the server
   • BChange the default ports for both HTTP and HTTPS
   • CImplement a web application firewall (WAF) in front of the server
   • DSeparate the public and internal applications onto different virtual hosts with distinct access controls
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A security team must assess a web server that hosts a critical application. The assessment must not disrupt production traffic. The team has access to a staging environment that mirrors the production configuration. Which approach is most appropriate?

   • ARun active vulnerability scans against the staging server and then manually verify findings on production.
   • BPerform only passive monitoring of production traffic to identify vulnerabilities.
   • CSkip the assessment and rely on the vendor's security advisories.
   • DRun active scans directly against production during off-peak hours.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   During a vulnerability assessment of a web server, which technique is used to identify the server's operating system and software versions?

   • APacket sniffing
   • BPort knocking
   • CBanner grabbing
   • DSocial engineering
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An attacker is attempting to enumerate valid usernames on a web server by sending login requests and comparing error messages. The server returns 'Invalid username' for unknown users and 'Invalid password' for known users. Which attack is being performed, and what is the best countermeasure?

   • ADirectory traversal; disable directory listing.
   • BDDoS attack; add rate limiting.
   • CUser enumeration; return a generic error message for both invalid username and invalid password.
   • DBrute-force attack; implement account lockout after three attempts.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A penetration tester is performing a web server assessment. The tester has already gathered information about the server's IP address, open ports, and web server software. According to a systematic hacking methodology, what should the tester do next?

   • AImmediately launch Metasploit exploits against the server
   • BCover tracks by clearing logs
   • CReport the findings to the client
   • DRun a vulnerability scanner to identify known weaknesses
   Reveal Solution Discussion Select an answer first