Discuss EC-Council 312-50 Exam Topic 2 Question 16

Take a look at the following attack on a Web Server using obstructed URL:

How would you protect from these attacks?

AConfigure the Web Server to deny requests involving 'hex encoded' characters

BCreate rules in IDS to alert on strange Unicode requests

CUse SSL authentication on Web Servers

DEnable Active Scripts Detection at the firewall and routers

Suggested Answer: B

Get Premium 312-50 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

15 comments · newest first

Arthur 12 months ago

Wait, can hex encoding really bypass security? That sounds wild!

Olive 12 months ago

Active Scripts Detection (Option D) might be overkill for this issue.

Walton 12 months ago

SSL (Option C) is good, but it won't stop these attacks directly.

Marion 1 year ago

I disagree, IDS rules (Option B) are more effective for detection.

Talia 1 year ago

Option A seems solid, hex encoding can be tricky.

Rolf 1 year ago

Active Scripts Detection at the firewall? I feel like that might help, but I can't quite remember how effective it is against URL obfuscation.

Providencia 1 year ago

SSL authentication seems like a good idea, but I don't recall it being directly related to this type of attack.

Cordell 1 year ago

I think creating IDS rules for strange Unicode requests sounds familiar. We practiced something similar in our labs, right?

Verda 1 year ago

I remember we discussed hex encoding in class, but I'm not sure if denying those requests is the best approach.

Devora 1 year ago

Okay, let me think this through. Since the sprint goals were completed early, the team should work with the Product Owner to select the next highest priority item from the backlog. That seems like the best way to keep the team productive.

Erasmo 1 year ago

I'm not totally sure about the difference between view and pure functions, but I think this question is asking about when they can be accessed. I'll need to review my notes on that.

Peggie 1 year ago

I remember a practice question about service profiles, and I think it mentioned that the registry record is a bit different, maybe like a summary of the profile?

Lemuel 1 year ago

This question seems pretty straightforward. I think the answer is B - you don't have to like it, you just have to be able to accept it.

Vilma 1 year ago

This looks like a tricky one. I'm not sure if the Global Mouse Clicks and Send Keys approach would work well for a read-only PDF. Maybe the OCR option would be more reliable?

Rhea 1 year ago

This question seems straightforward, I'm pretty confident I can identify the false statement.

EC-Council 312-50 Exam - Topic 2 Question 16 Discussion