Which attack targets the configuration and administration of the web server itself?

Question

Options

• ADirectory traversal
• BBuffer overflow
• CDNS spoofing
• DMan-in-the-middle attack

• A
  93% (54)
• B
  3% (2)
• C
  2% (1)
• D
  2% (1)

Explanation

Directory traversal (A) directly targets the web server's configuration by exploiting improper path handling, allowing attackers to navigate outside the intended web root and access server files like /etc/passwd or configuration files - abusing how the server itself is set up and administered.

The distractors attack different layers: Buffer overflow (B) exploits memory management in application code, not server config. DNS spoofing (C) corrupts name resolution at the network/DNS layer, redirecting traffic before it ever reaches the server. Man-in-the-middle (D) intercepts communication between client and server in transit - it's a network interception attack, not a server configuration exploit.

Memory tip: Think "directory = server structure" - traversal attacks walk the server's own file tree, which is inherently a configuration/administration concern. If the attack navigates the server's filesystem, it's targeting server config.

No community discussion yet for this question.