nerdexam
EC-Council

312-50V12 · Question #207

As part of a college project, you have set up a web server for hosting your team's application. Given your interest in cybersecurity, you have taken the lead in securing the server. You are aware…

The correct answer is D. Performing regular server configuration audits. To best protect a web server from misconfiguration-based attacks, regularly performing server configuration audits is the most effective action as it directly identifies and rectifies security flaws arising from incorrect settings.

Submitted by kavita_s· Mar 4, 2026Web Application Hacking

Question

As part of a college project, you have set up a web server for hosting your team's application. Given your interest in cybersecurity, you have taken the lead in securing the server. You are aware that hackers often attempt to exploit server misconfigurations. Which of the following actions would best protect your web server from potential misconfiguration-based attacks?

Options

  • ARegularly backing up server data
  • BEnabling multi-factor authentication for users
  • CImplementing a firewall to filter traffic
  • DPerforming regular server configuration audits

How the community answered

(22 responses)
  • A
    9% (2)
  • B
    5% (1)
  • C
    5% (1)
  • D
    82% (18)

Why each option

To best protect a web server from misconfiguration-based attacks, regularly performing server configuration audits is the most effective action as it directly identifies and rectifies security flaws arising from incorrect settings.

ARegularly backing up server data

Regularly backing up server data is crucial for disaster recovery, but it does not prevent misconfigurations from occurring or being exploited in the first place.

BEnabling multi-factor authentication for users

Enabling multi-factor authentication (MFA) protects user accounts from unauthorized access, but it does not secure the underlying server configuration from exploitation.

CImplementing a firewall to filter traffic

Implementing a firewall to filter traffic helps block malicious network access, but it does not address or prevent misconfigurations within the server itself that could still be exploited by authorized or indirect means.

DPerforming regular server configuration auditsCorrect

Performing regular server configuration audits directly addresses the risk of misconfigurations by systematically reviewing server settings, policies, and files to identify vulnerabilities and ensure compliance with security baselines, thereby preventing attacks that exploit these flaws.

Concept tested: Server security configuration auditing and hardening

Source: https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/securing-ad-ds-installation

Topics

#web server security#server hardening#configuration audits#attack surface reduction

Community Discussion

No community discussion yet for this question.

Full 312-50V12 Practice