Hacking Web Servers CEH Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In the web server hacking methodology, which phase involves gathering information about the target web server, such as IP addresses, domain names, and technologies in use?

   • AEnumeration
   • BExploitation
   • CPrivilege escalation
   • DFootprinting
   Reveal Solution Discussion Select an answer first
2. 22expert · hard

   A penetration tester is assessing a web server that appears to be well-hardened. The tester has completed footprinting and enumeration but has not found any obvious vulnerabilities. The tester suspects that the server may be vulnerable to a brute force attack on the SSH service, but the client has asked to avoid any action that could lock out legitimate users. Which approach is most appropriate?

   • ARun a full brute force attack with a large wordlist to maximize coverage
   • BSkip brute force testing and focus on other attack vectors
   • CUse a low-and-slow brute force attack with a small wordlist and long delays
   • DUse Metasploit's SSH login module with default credentials only
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which tool is specifically designed to scan web servers for misconfigurations, outdated software, and potentially dangerous files?

   • AWireshark
   • BNmap
   • CNikto
   • DJohn the Ripper
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A penetration tester is performing a web server assessment and has discovered that the server is vulnerable to directory traversal. The tester wants to exploit this to read sensitive files, but the server is behind a WAF that blocks requests containing '../'. Which technique is most likely to bypass the WAF?

   • ASend the request over HTTPS instead of HTTP
   • BUse URL encoding for the dots and slashes, such as %2e%2e%2f
   • CUse a VPN to hide the source IP
   • DUse a different HTTP method, such as POST, to send the request
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which countermeasure is most effective in preventing known vulnerabilities in web server software from being exploited?

   • AChanging the default port from 80 to 8080
   • BRegularly applying security patches and updates
   • CUsing a web application firewall (WAF)
   • DDisabling the web server's error pages
   Reveal Solution Discussion Select an answer first