Web Server Attacks EHE Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security auditor is reviewing a web server's configuration and notices that the server is running both a web application and a database management system on the same host. The database is listening on a public IP address. Which attack surface does this configuration primarily increase?

   • AThe database is directly exposed to the internet, increasing the attack surface
   • BThe server's operating system is more likely to be outdated
   • CThe web application is more vulnerable to SQL injection
   • DThe server is more vulnerable to physical theft
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A web server is found to have several unnecessary services running, including an FTP server and a telnet daemon. The server is only supposed to serve web content. Which hardening step should be performed first?

   • AInstall a firewall
   • BEnable logging
   • CDisable or uninstall the unnecessary services
   • DChange the default web server banner
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A web server is hosted in a DMZ and also has a management interface that is accessible from the internal network. The management interface uses a self-signed certificate. An administrator notices that the server's web application is vulnerable to SQL injection. Which combination of measures should be implemented to reduce the risk?

   • AMove the management interface to the internet for easier access
   • BUse parameterized queries in the application, restrict management interface access to specific internal IPs, and replace the self-signed certificate with a trusted certificate
   • COnly use parameterized queries and leave the management interface as is
   • DDisable the management interface and use a direct database connection
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company runs a public-facing web server that also hosts an internal admin panel. The admin panel is accessible from the internet. The server is running an outdated version of the web server software with known vulnerabilities. The company wants to reduce the attack surface while keeping the admin panel accessible to remote administrators. Which combination of measures best achieves this?

   • AMove the admin panel to a different port and rely on security through obscurity
   • BKeep the server as is but add a WAF
   • CUpdate the web server software, restrict admin panel access to a VPN, and disable unused modules
   • DDisable the admin panel and use a third-party remote desktop tool
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A web server is vulnerable to directory traversal because the application does not validate user-supplied file paths. The developer wants to fix the issue without breaking existing functionality. Which coding practice is the most effective?

   • AUse a blacklist of dangerous characters like '..' and '/'
   • BDisable error messages that reveal file paths
   • CEncode user input before using it in file paths
   • DUse a whitelist of allowed file names and reject any input that contains '..'
   Reveal Solution Discussion Select an answer first