312-50V11 · Question #576
Windows file servers commonly hold sensitive files, databases, passwords and more. Which of the following choices would be a common vulnerability that usually exposes them?
The correct answer is C. Missing patches. Windows file servers are most commonly exposed through missing patches, which leave known vulnerabilities unmitigated and allow attackers to exploit them. Patch management is a foundational vulnerability remediation practice.
Question
Windows file servers commonly hold sensitive files, databases, passwords and more. Which of the following choices would be a common vulnerability that usually exposes them?
Options
- ACross-site scripting
- BSQL injection
- CMissing patches
- DCRLF injection
How the community answered
(36 responses)- A3% (1)
- B6% (2)
- C89% (32)
- D3% (1)
Why each option
Windows file servers are most commonly exposed through missing patches, which leave known vulnerabilities unmitigated and allow attackers to exploit them. Patch management is a foundational vulnerability remediation practice.
Cross-site scripting is a web application vulnerability that targets browsers and web apps, not Windows file servers directly.
SQL injection targets database-driven web applications by manipulating SQL queries, not a common attack vector against file servers.
Missing patches leave Windows file servers exposed to publicly disclosed vulnerabilities for which exploits are readily available. Attackers routinely scan for unpatched systems and exploit known CVEs, making poor patch management the most prevalent vulnerability affecting file servers specifically.
CRLF injection exploits improper handling of carriage return and line feed characters in web applications, not a typical file server vulnerability.
Concept tested: Common vulnerabilities in Windows file servers - patch management
Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
Topics
Community Discussion
No community discussion yet for this question.