GIAC

GWAPT · Question #55

During a configuration audit, you find that directory listing is enabled. What is the associated risk?

The correct answer is B. Exposure of sensitive files and directories. See the full explanation below for the reasoning.

Question

During a configuration audit, you find that directory listing is enabled. What is the associated risk?

Options

AUnauthorized directory traversal
BExposure of sensitive files and directories
CExecution of stored XSS payloads
DUnauthorized modification of session cookies

How the community answered

(39 responses)

A
3% (1)
B
72% (28)
C
18% (7)
D
8% (3)

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion

Full GWAPT Practice