Which countermeasure helps detect and respond to suspicious activities on a web server by analyzing logs and network traffic?

Encrypting web traffic with TLS

Implementing intrusion detection and monitoring

You are conducting a penetration test on a web server. After footprinting, you have identified the server is running nginx 1.18.0. You now need to discover the directory structure and identify hidden files or backup files that might contain sensitive information. Which tool is most appropriate for this enumeration task?

Wireshark to capture HTTP traffic

DirBuster or gobuster with a wordlist

Nikto with the -nointeractive option

Metasploit's auxiliary/scanner/http/http_version

A company runs a public-facing web server that must remain available during a DDoS attack. They have a limited budget and cannot afford a commercial DDoS protection service. Which combination of countermeasures is most effective under these constraints?

Disable the web server's error pages to reduce response size.

Increase server bandwidth and add more RAM.

Use a reverse proxy with connection limits and enable SYN cookies on the server.

Implement rate limiting at the web server and configure the firewall to drop traffic from the attacking IPs.

EC-CouncilCertified Ethical Hacker

Domain 5Objective 1

Hacking Web Servers CEH Practice Questions (Page 6)

Part of the Web Application Hacking domain, which makes up ~8% of our current practice bank. EC-Council does not publish an official question count, but from its 240-minute exam (~95–160 total, ~8–13 in this domain), expect 2–3 from this objective — we provide 41 practice questions to prepare you well beyond it. (estimate)

41questions here

9free pages

6concepts

Questions 26–30

26foundation · easy
Which countermeasure helps detect and respond to suspicious activities on a web server by analyzing logs and network traffic?
Select an answer first
27application · easy
You are conducting a penetration test on a web server. After footprinting, you have identified the server is running nginx 1.18.0. You now need to discover the directory structure and identify hidden files or backup files that might contain sensitive information. Which tool is most appropriate for this enumeration task?
Select an answer first
28expert · hard
A company runs a public-facing web server that must remain available during a DDoS attack. They have a limited budget and cannot afford a commercial DDoS protection service. Which combination of countermeasures is most effective under these constraints?
Select an answer first
29foundation · easy
After footprinting a web server, which phase in the hacking methodology involves actively connecting to the server to identify open ports, services, and potential vulnerabilities?
Select an answer first
30application · medium
A penetration tester is assessing a customer's Apache web server. The tester has already identified the server version and OS from the HTTP response headers. The next step is to enumerate directories and files that might reveal sensitive information or hidden admin panels. Which tool is most appropriate for this task?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CEH

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CEH” is a trademark of its owner, used for identification only.

Hacking Web Servers CEH Practice Questions (Page 6)

Questions 26–30

Which countermeasure helps detect and respond to suspicious activities on a web server by analyzing logs and network traffic?

A company runs a public-facing web server that must remain available during a DDoS attack. They have a limited budget and cannot afford a commercial DDoS protection service. Which combination of countermeasures is most effective under these constraints?

After footprinting a web server, which phase in the hacking methodology involves actively connecting to the server to identify open ports, services, and potential vulnerabilities?

Keep studying — Web Application Hacking