A web application's login endpoint is being flooded with automated login attempts from a single IP address. The security team wants to implement a defense that specifically limits the number of requests from that IP without affecting legitimate users. Which control is most appropriate?

Disable the login endpoint temporarily

Add a CAPTCHA to the login form for all users

Implement rate limiting on the login endpoint, allowing a maximum of 5 attempts per minute per IP

Increase the password minimum length to 20 characters

A company runs a web application on Nginx. During a security review, the team discovers that requesting /uploads/ returns an HTML page listing all uploaded user files. The application needs to keep serving these files directly via their URLs. Which Nginx configuration change should be applied?

Add deny all; to the location block for /uploads/

Add autoindex off; to the server or location block for /uploads/

Set client_max_body_size to 0 for the /uploads/ location

Set index index.php; in the location block for /uploads/

A penetration tester has found a directory listing on a web server that reveals a file named 'config.php.bak'. The tester wants to download the file and analyze it for sensitive information. However, the server returns a 403 Forbidden when the tester tries to access the file directly. Which technique is most likely to bypass this restriction?

Attempt to access the file via the directory listing's 'download' link.

Try alternative file extensions or URL encoding, such as 'config.php.bak' vs 'config.php%2ebak'.

Use a web proxy to modify the 'Referer' header.

Use a directory brute-forcing tool to find other copies of the file.

During a routine review, a security analyst notices that navigating to https://intranet.corp.local/uploads/ in a browser displays a list of all files in that directory, including a backup file named 'db_credentials_old.txt'. The web server is Apache on Linux. The analyst must quickly reduce exposure while preserving the ability to download files via direct URLs. What is the most appropriate immediate action?

Add 'Options -Indexes' to the directory configuration in the Apache config or .htaccess file.

Rename the backup file to a non-guessable name.

Set the directory permissions to 000 using chmod.

Delete the backup file from the server immediately.

EC-CouncilWeb Application Hacking and Security

Domain 6Objective 2

Directory Browsing and Bruteforcing WAHS Practice Questions (Page 7)

Part of the Security Misconfiguration domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 360-minute exam (~145–240 total, ~19–31 in this domain), expect 6–10 from this objective — we provide 42 practice questions to prepare you well beyond it. (estimate)

42questions here

9free pages

6concepts

Questions 31–35

31application · medium
A web application's login endpoint is being flooded with automated login attempts from a single IP address. The security team wants to implement a defense that specifically limits the number of requests from that IP without affecting legitimate users. Which control is most appropriate?
Select an answer first
32application · medium
A company runs a web application on Nginx. During a security review, the team discovers that requesting /uploads/ returns an HTML page listing all uploaded user files. The application needs to keep serving these files directly via their URLs. Which Nginx configuration change should be applied?
Select an answer first
33foundation · easy
In an Nginx server configuration, which setting is used to disable directory listing?
Select an answer first
34expert · hard
A penetration tester has found a directory listing on a web server that reveals a file named 'config.php.bak'. The tester wants to download the file and analyze it for sensitive information. However, the server returns a 403 Forbidden when the tester tries to access the file directly. Which technique is most likely to bypass this restriction?
Select an answer first
35application · medium
During a routine review, a security analyst notices that navigating to https://intranet.corp.local/uploads/ in a browser displays a list of all files in that directory, including a backup file named 'db_credentials_old.txt'. The web server is Apache on Linux. The analyst must quickly reduce exposure while preserving the ability to download files via direct URLs. What is the most appropriate immediate action?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to WAHS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “WAHS” is a trademark of its owner, used for identification only.

Directory Browsing and Bruteforcing WAHS Practice Questions (Page 7)

Questions 31–35

A web application's login endpoint is being flooded with automated login attempts from a single IP address. The security team wants to implement a defense that specifically limits the number of requests from that IP without affecting legitimate users. Which control is most appropriate?

A company runs a web application on Nginx. During a security review, the team discovers that requesting /uploads/ returns an HTML page listing all uploaded user files. The application needs to keep serving these files directly via their URLs. Which Nginx configuration change should be applied?

In an Nginx server configuration, which setting is used to disable directory listing?

Keep studying — Security Misconfiguration