312-50V12 · Question #298
When considering how an attacker may exploit a web server, what is web server footprinting?
The correct answer is D. When an attacker gathers system-level data, including account details and server names. Web server footprinting is the initial reconnaissance phase where an attacker gathers detailed system-level information about a target web server to understand its infrastructure.
Question
Options
- AWhen an attacker creates a complete profile of the site's external links and file structures
- BWhen an attacker uses a brute-force attack to crack a web-server password
- CWhen an attacker implements a vulnerability scanner to identity weaknesses
- DWhen an attacker gathers system-level data, including account details and server names
How the community answered
(39 responses)- A5% (2)
- B3% (1)
- D92% (36)
Why each option
Web server footprinting is the initial reconnaissance phase where an attacker gathers detailed system-level information about a target web server to understand its infrastructure.
Creating a profile of external links and file structures describes website content mapping or discovery, which is a specific type of reconnaissance focused on the site's architecture rather than the broader underlying system details.
Footprinting involves the systematic collection of system-level data, including server names, IP addresses, operating system information, and potentially user account details, to create a comprehensive profile of the target's digital infrastructure. This phase is crucial for an attacker to identify potential entry points and vulnerabilities before launching an actual attack.
Concept tested: Web server footprinting and reconnaissance phase
Source: https://owasp.org/www-community/attacks/Footprinting
Topics
Community Discussion
No community discussion yet for this question.