SY0-501 · Question #150
A systems administrator is reviewing the following information from a compromised server: Given the above information, which of the following processes was MOST likely exploited via a remote buffer…
The correct answer is A. Apache. Apache, as a widely deployed internet-facing web server, is most susceptible to remote buffer overflow attacks due to its continuous processing of untrusted HTTP requests from external sources.
Question
A systems administrator is reviewing the following information from a compromised server:
Given the above information, which of the following processes was MOST likely exploited via a remote buffer overflow attack?
Options
- AApache
- BLSASS
- CMySQL
- DTFTP
How the community answered
(45 responses)- A80% (36)
- B4% (2)
- C2% (1)
- D13% (6)
Why each option
Apache, as a widely deployed internet-facing web server, is most susceptible to remote buffer overflow attacks due to its continuous processing of untrusted HTTP requests from external sources.
Apache is a common web server responsible for handling untrusted HTTP requests over a network. This constant exposure to external input makes it a frequent target for remote buffer overflow exploits, which can allow an attacker to execute arbitrary code on the server.
LSASS is a core Windows process primarily responsible for local security policy and authentication, typically exploited locally or post-initial compromise, rather than being the direct target of an initial remote buffer overflow attack in the same manner as a web server.
MySQL is a database server where remote exploits often involve SQL injection or authentication bypass, rather than a general buffer overflow from processing arbitrary network traffic directly in its primary service like a web server.
TFTP is a simple file transfer protocol that is less complex and less commonly exposed to the internet than a full web server, making it a less likely candidate for the *most likely* process exploited via a remote buffer overflow attack compared to Apache.
Concept tested: Remote buffer overflow vulnerabilities in internet-facing services
Source: https://learn.microsoft.com/en-us/windows/win32/secbp/buffer-overruns
Topics
Community Discussion
No community discussion yet for this question.