Security Misconfigurations WAHS Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which manual technique can be used to detect a security misconfiguration in a web server?

   • AMonitoring network traffic for unusual patterns
   • BReviewing the application's source code for SQL injection
   • CSending an HTTP request with an invalid method to see if the server reveals its version
   • DChecking the server's CPU usage
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   During a security assessment, a tester notices that the web application's directory listing is enabled on the /uploads folder. The tester browses to that folder and sees a file named backup.zip. The tester downloads it and finds a database configuration file with credentials. Which misconfiguration chain is best demonstrated?

   • AVerbose error messages revealing the database schema
   • BDefault credentials allowing access to the admin panel
   • CUnnecessary feature (directory listing) leading to exposure of sensitive files
   • DMissing security headers leading to cross-site scripting
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An attacker discovers that a web server has directory listing enabled and finds a backup file named 'config.old' in the /backup directory. What is the most likely immediate next step an attacker would take to exploit this misconfiguration?

   • AUpload a web shell to the /backup directory.
   • BDownload the backup file and search for credentials or sensitive configuration data.
   • CPerform a denial-of-service attack by requesting many files in the directory.
   • DUse the directory listing to enumerate valid usernames from the file names.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company is migrating its web application to a new server. They want to ensure that the new server is configured securely from the start. Which approach is most effective?

   • AUse a hardened baseline image and apply security configuration checks before deployment.
   • BDeploy the server and perform a security audit after it is live.
   • CInstall the latest software and rely on its default settings.
   • DCopy the configuration from the old server to save time.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company is hardening its web application after a security audit found that the server responds with detailed error messages, directory listing is enabled, and the admin console is accessible on the internet. Which remediation should be prioritized to reduce the most immediate risk?

   • AChange all default passwords and enforce strong password policies
   • BDisable directory listing and restrict admin console access to internal networks
   • CImplement a web application firewall (WAF) to filter malicious requests
   • DEnable verbose error messages for easier debugging
   Reveal Solution Discussion Select an answer first