nerdexam
CompTIA

SY0-501 · Question #150

A systems administrator is reviewing the following information from a compromised server: Given the above information, which of the following processes was MOST likely exploited via a remote buffer…

The correct answer is A. Apache. Apache, as a widely deployed internet-facing web server, is most susceptible to remote buffer overflow attacks due to its continuous processing of untrusted HTTP requests from external sources.

Submitted by paula_co· Mar 4, 2026Threats, vulnerabilities, and mitigations

Question

A systems administrator is reviewing the following information from a compromised server:

Given the above information, which of the following processes was MOST likely exploited via a remote buffer overflow attack?

Options

  • AApache
  • BLSASS
  • CMySQL
  • DTFTP

How the community answered

(45 responses)
  • A
    80% (36)
  • B
    4% (2)
  • C
    2% (1)
  • D
    13% (6)

Why each option

Apache, as a widely deployed internet-facing web server, is most susceptible to remote buffer overflow attacks due to its continuous processing of untrusted HTTP requests from external sources.

AApacheCorrect

Apache is a common web server responsible for handling untrusted HTTP requests over a network. This constant exposure to external input makes it a frequent target for remote buffer overflow exploits, which can allow an attacker to execute arbitrary code on the server.

BLSASS

LSASS is a core Windows process primarily responsible for local security policy and authentication, typically exploited locally or post-initial compromise, rather than being the direct target of an initial remote buffer overflow attack in the same manner as a web server.

CMySQL

MySQL is a database server where remote exploits often involve SQL injection or authentication bypass, rather than a general buffer overflow from processing arbitrary network traffic directly in its primary service like a web server.

DTFTP

TFTP is a simple file transfer protocol that is less complex and less commonly exposed to the internet than a full web server, making it a less likely candidate for the *most likely* process exploited via a remote buffer overflow attack compared to Apache.

Concept tested: Remote buffer overflow vulnerabilities in internet-facing services

Source: https://learn.microsoft.com/en-us/windows/win32/secbp/buffer-overruns

Topics

#buffer overflow#remote exploitation#Apache#process analysis

Community Discussion

No community discussion yet for this question.

Full SY0-501 Practice