312-50V13 · Question #74
Why should the security analyst disable/remove unnecessary ISAPI filters?
The correct answer is B. To defend against webserver attacks. ISAPI filters are extensions for IIS web servers that can introduce vulnerabilities if not properly managed, so removing unnecessary ones reduces the attack surface.
Question
Options
- ATo defend against social engineering attacks
- BTo defend against webserver attacks
- CTo defend against jailbreaking
- DTo defend against wireless attacks
How the community answered
(31 responses)- A3% (1)
- B94% (29)
- D3% (1)
Why each option
ISAPI filters are extensions for IIS web servers that can introduce vulnerabilities if not properly managed, so removing unnecessary ones reduces the attack surface.
Social engineering attacks exploit human psychology, not web server configurations like ISAPI filters.
ISAPI filters are dynamic link libraries (DLLs) that extend the functionality of Microsoft's Internet Information Services (IIS) web server. Unnecessary or vulnerable ISAPI filters can be exploited by attackers to gain unauthorized access, execute malicious code, or perform other web server attacks, making their removal a crucial security hardening step.
Jailbreaking typically refers to gaining elevated privileges on mobile devices, not a direct exploit related to ISAPI filters on a web server.
Wireless attacks target Wi-Fi infrastructure or protocols, which are unrelated to web server ISAPI filters.
Concept tested: Web server security hardening (ISAPI filters)
Source: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc779471(v=ws.10)
Topics
Community Discussion
No community discussion yet for this question.