Web Server Attacks EHE Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A web server is behind a load balancer that terminates TLS. The server itself is vulnerable to HTTP request smuggling because it does not properly handle 'Content-Length' and 'Transfer-Encoding' headers. An attacker is using this to bypass security controls. Which countermeasure is most effective?

   • ADisable HTTP/1.1 and use only HTTP/2
   • BIncrease the server's request timeout
   • CBlock requests with 'Transfer-Encoding' headers
   • DConfigure the load balancer to normalize conflicting headers and reject ambiguous requests
   Reveal Solution Discussion Select an answer first
2. 37expert · hard

   A web server administrator is implementing security controls and must choose between a web application firewall (WAF) and a host-based intrusion prevention system (HIPS). The server is public-facing and has a history of application-layer attacks. The administrator has a limited budget and needs to prioritize. Which approach is the most effective for this scenario?

   • ADeploy both a WAF and a HIPS, but only if the budget allows
   • BDeploy a HIPS on the server to monitor system calls
   • CDeploy a WAF in front of the server to filter application-layer traffic
   • DUse network segmentation to isolate the server
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which of the following is an example of a common web server misconfiguration that can lead to a security vulnerability?

   • ARestricting administrative access to trusted IP addresses
   • BUsing a secure HTTPS certificate
   • CEnabling directory listing on the web server
   • DDisabling unnecessary modules and features
   Reveal Solution Discussion Select an answer first
5. 39expert · hard

   A company is deploying a web server that will host both a public marketing site and a sensitive internal application. The internal application must not be accessible from the internet. The administrator wants to minimize the attack surface while keeping both services functional. Which architecture is most appropriate?

   • AHost both on the same server but use different virtual hosts
   • BPlace the public site on a public-facing server and the internal app on a separate server in the internal network
   • CUse a reverse proxy to hide the internal app's IP
   • DHost both on the same server and restrict access to the internal app via firewall rules
   Reveal Solution Discussion Select an answer first
6. 40application · medium

   A web server is running an outdated version of Apache that is known to be vulnerable to a remote code execution flaw. The server hosts a critical application that cannot be taken offline during business hours. Which approach best balances security and availability?

   • AImmediately shut down the server and apply the patch during business hours
   • BWait until the next scheduled maintenance window to patch
   • CDisable the web server's scripting engine
   • DApply a virtual patch using a WAF rule that blocks known exploit patterns
   Reveal Solution Discussion Select an answer first