CSSLP · Question #216
John works as a professional Ethical Hacker. He has been assigned the project of testing the attacks. As a countermeasure, he suggests that the Network Administrator should remove the IPP printing cap
The correct answer is B. IIS buffer overflow. Removing IPP printing capability from a server, especially an IIS server, is a common countermeasure against vulnerabilities like buffer overflows that can be exploited through web-based services.
Question
John works as a professional Ethical Hacker. He has been assigned the project of testing the attacks. As a countermeasure, he suggests that the Network Administrator should remove the IPP printing capability from the server. He is suggesting this as a countermeasure against __________.
Options
- ASNMP enumeration
- BIIS buffer overflow
- CNetBIOS NULL session
- DDNS zone transfer
How the community answered
(22 responses)- A14% (3)
- B73% (16)
- C5% (1)
- D9% (2)
Why each option
Removing IPP printing capability from a server, especially an IIS server, is a common countermeasure against vulnerabilities like buffer overflows that can be exploited through web-based services.
SNMP enumeration involves gathering information about a network by querying the Simple Network Management Protocol agent, which is unrelated to IPP printing.
Internet Printing Protocol (IPP) is often implemented as part of web servers like IIS, and historical vulnerabilities, including buffer overflows, have existed in these components. Removing or disabling IPP printing capability from an IIS server is a direct countermeasure to prevent the exploitation of such vulnerabilities that could lead to buffer overflows or other code execution attacks through the printing service.
NetBIOS NULL sessions are used to access network shares and gather information without authentication, separate from printing services.
DNS zone transfer is a process where a DNS server transfers a copy of part of its database to another DNS server, which is unrelated to IPP printing.
Concept tested: IIS buffer overflow countermeasures
Topics
Community Discussion
No community discussion yet for this question.