Web Server Attacks EHE Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security engineer is hardening a web server that must remain available 24/7. The server is currently vulnerable to directory traversal and has a known DoS vulnerability that can be triggered by a specific HTTP request. The engineer has limited maintenance windows and cannot take the server offline for long. Which approach best balances security and availability?

   • ATake the server offline immediately to apply all patches
   • BDisable the vulnerable features entirely
   • CApply a virtual patch using a WAF rule to block traversal and DoS patterns, then schedule a full patch during the next maintenance window
   • DIncrease server capacity to absorb the DoS and ignore the traversal risk
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary goal of an HTTP verb tampering attack?

   • ATo read files outside the web root directory
   • BTo bypass security controls by using unexpected HTTP methods
   • CTo inject malicious SQL code into database queries
   • DTo overload the server with a high volume of requests
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is deploying a new web application on a server that also hosts legacy applications. The new application requires PHP, but the legacy applications only use static HTML. The administrator is concerned about reducing the attack surface. Which configuration is the most secure while maintaining functionality?

   • AUse a reverse proxy to hide the server's IP
   • BRun the new application in a separate virtual host with PHP enabled only for that host
   • CDisable PHP entirely and use CGI scripts
   • DEnable PHP globally on the server
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A web server has been compromised due to a known vulnerability in a third-party plugin. The administrator wants to prevent similar incidents in the future. Which countermeasure is most effective?

   • ADisable the plugin entirely
   • BChange the server's IP address
   • CEstablish a patch management process that includes third-party plugins
   • DUse a web application firewall to block known exploit signatures
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A penetration tester is testing a web server and sends a request with the HTTP method 'PROPFIND'. The server responds with a 200 OK and lists directory contents. This behavior indicates that the server is vulnerable to which type of attack?

   • AHTTP verb tampering
   • BCross-site request forgery (CSRF)
   • CDirectory traversal
   • DSlowloris DoS
   Reveal Solution Discussion Select an answer first