nerdexam
(ISC)2

CSSLP · Question #216

John works as a professional Ethical Hacker. He has been assigned the project of testing the attacks. As a countermeasure, he suggests that the Network Administrator should remove the IPP printing cap

The correct answer is B. IIS buffer overflow. Removing IPP printing capability from a server, especially an IIS server, is a common countermeasure against vulnerabilities like buffer overflows that can be exploited through web-based services.

Secure Software Testing

Question

John works as a professional Ethical Hacker. He has been assigned the project of testing the attacks. As a countermeasure, he suggests that the Network Administrator should remove the IPP printing capability from the server. He is suggesting this as a countermeasure against __________.

Options

  • ASNMP enumeration
  • BIIS buffer overflow
  • CNetBIOS NULL session
  • DDNS zone transfer

How the community answered

(22 responses)
  • A
    14% (3)
  • B
    73% (16)
  • C
    5% (1)
  • D
    9% (2)

Why each option

Removing IPP printing capability from a server, especially an IIS server, is a common countermeasure against vulnerabilities like buffer overflows that can be exploited through web-based services.

ASNMP enumeration

SNMP enumeration involves gathering information about a network by querying the Simple Network Management Protocol agent, which is unrelated to IPP printing.

BIIS buffer overflowCorrect

Internet Printing Protocol (IPP) is often implemented as part of web servers like IIS, and historical vulnerabilities, including buffer overflows, have existed in these components. Removing or disabling IPP printing capability from an IIS server is a direct countermeasure to prevent the exploitation of such vulnerabilities that could lead to buffer overflows or other code execution attacks through the printing service.

CNetBIOS NULL session

NetBIOS NULL sessions are used to access network shares and gather information without authentication, separate from printing services.

DDNS zone transfer

DNS zone transfer is a process where a DNS server transfers a copy of part of its database to another DNS server, which is unrelated to IPP printing.

Concept tested: IIS buffer overflow countermeasures

Topics

#Buffer overflow#Vulnerability assessment#Security countermeasures#IIS security

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice