Module 13 - Hacking Web Servers

Question 1

___ ______ is a computer system that stores, processes and delivers web pages to clients via HTTP.

a. DNS Server
b. Web Server
c. Exchange Server
d. SCCM Server

Answer 1

b. Web Server

Question 2

Web Server Concepts:

Internet Information Services (IIS) is used on which system?

a. Linux
b. Unix
c. Solaris
d. Microsoft

Answer 2

d. Microsoft

Question 3

Web Server Concepts:

Apache web services are used on which system?

a. Linux
b. Unix
c. Solaris
d. Microsoft

Answer 3

a. Linux

Question 4

Web Server Attacks:

• Attacker uses compromised PCs with spoofed IP address to amplify the DDoS attacks on victims’ DNS server by exploiting DNS recursive method.
• 2 or more computers attack a DNS server
  a. DNS Attack
  b. Directory Traversal Attack
  c. DNS Amplification Attack
  d. Man-in-the-Middle Attack (MITM)

Answer 4

c. DNS Amplification Attack

Question 5

Web Server Attacks:

• 1 computer attacks a DNS server.
  a. DNS Attack
  b. Directory Traversal Attack
  c. DNS Amplification Attack
  d. Man-in-the-Middle Attack (MITM)

Answer 5

a. DNS Attack

Question 6

Web Server Attacks:

Attackers gain access to restricted directories outside of the web server root directory.

a. DNS Attack
b. Directory Traversal Attack
c. DNS Amplification Attack
d. Man-in-the-Middle Attack (MITM)

Answer 6

b. Directory Traversal Attack

Question 7

Web Server Attacks:

• Allows an attacker to access sensitive information by intercepting and altering communications between an end-user and server.
• Can lead to a Replay Attack.
  a. DNS Attack
  b. Directory Traversal Attack
  c. DNS Amplification Attack
  d. Man-in-the-Middle Attack (MITM)

Answer 7

d. Man-in-the-Middle Attack

Question 8

Web Server Attack Methodology:

Implement _____________ ____ scan to identify weaknesses in a network and determine if the system can be exploited.

a. Banner Grab
b. Exploit Scan
c. Service Scan
d. Vulnerability Scan

Answer 8

d. Vulnerability Scan

Question 9

Web Server Attack Tools:

________ is an exploit which supports fully automated exploitation of web servers, by abusing known vulnerabilities and leveraging weak passwords via Telnet, SSH, HTTP, and SNMP.

a. Metasploit
b. Nessus
c. IntelLink
d. Lexus Nexus

Answer 9

a. Metasploit

Question 10

Patch Management:

A ________ adds functionality to a system.

a. Service Pack
b. Patch
c. Exploit
d. Hotfix

Answer 10

b. Patch

Question 11

Patch Management:

A _________ is a combination of 100+ hotfixes and patches for a system.

a. Service Pack
b. Patch
c. Exploit
d. Hotfix

Answer 11

a. Service Pack

Question 12

Patch Management:

A ________ fixes things or something on a system.

a. Service Pack
b. Patch
c. Exploit
d. Hotfix

Answer 12

d. Hotfix