Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil 312-50 Exam - Topic 8 Question 65 Discussion

Take a look at the following attack on a Web Server using obstructed URL:How would you protect from these attacks?
B) Create rules in IDS to alert on strange Unicode requests
A) Configure the Web Server to deny requests involving 'hex encoded' characters
C) Use SSL authentication on Web Servers
D) Enable Active Scripts Detection at the firewall and routers

Eccouncil 312-50 Exam - Topic 8 Question 65 Discussion

Actual exam question for Eccouncil's 312-50 exam
Question #: 65
Topic #: 8
[All 312-50 Questions]

Take a look at the following attack on a Web Server using obstructed URL:

How would you protect from these attacks?

Show Suggested Answer Hide Answer
Suggested Answer: B

by Fletcher at Feb 03, 2023, 01:56 AM

Limited Time Offer

25%

Off

Get Premium 312-50 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Lizbeth
8 months ago
Wait, people still use Active Scripts Detection? That's a bit outdated, right?
upvoted 0 times
...
Carole
8 months ago
Definitely need to configure the server to deny those hex characters!
upvoted 0 times
...
Antonio
9 months ago
Isn't hex encoding pretty common? Not sure if blocking it is the best move.
upvoted 0 times
...
Lai
9 months ago
I disagree, SSL alone (Option C) won't stop these attacks.
upvoted 0 times
...
Doug
9 months ago
Option B sounds solid, gotta monitor those Unicode requests!
upvoted 0 times
...
Peggie
9 months ago
Active Scripts Detection sounds familiar, but I can't recall if it directly relates to URL obfuscation. I might lean towards option B instead.
upvoted 0 times
...
Cathrine
9 months ago
I feel like SSL authentication is more about securing data in transit rather than preventing these specific attacks. So, I'm not sure about option C.
upvoted 0 times
...
Elfrieda
9 months ago
I'm not entirely sure, but I think IDS rules for Unicode requests could help detect these types of attacks. Option B might be the way to go.
upvoted 0 times
...
Alyssa
9 months ago
I remember studying about hex encoding and how it can be used to bypass filters, so option A seems like a solid choice.
upvoted 0 times
...
Lilli
9 months ago
I'm a little confused - option C talks about clicking on PowerPoint Presentations, but I'm not sure if that's the same as searching for PowerPoint files. I might try option D just to be safe.
upvoted 0 times
...
Tamra
10 months ago
Okay, I think I've got a handle on this. The key things to focus on are the privileges required, the provisioning process, and the differences between cloning and incremental recovery. I'm feeling pretty confident I can get this one right.
upvoted 0 times
...
Martina
10 months ago
Hmm, I'm a bit confused on this one. Is a zone the first domain that belongs to a company? Or is it a collection of domains? I'll have to think this through carefully.
upvoted 0 times
...
Verlene
10 months ago
This looks straightforward, I just need to add up the income items and subtract the deductions to get the AGI.
upvoted 0 times
...
Sol
1 year ago
Haha, I love how these hackers try to get all fancy with their URL obfuscation. But don't worry, I'm not falling for that nonsense. Option A is the way to go, my friends!
upvoted 0 times
...
Brinda
1 year ago
Well, this is a real head-scratcher. I'm gonna have to go with A too - those hex-encoded characters are just begging to be denied. Time to put the web server on a strict character diet!
upvoted 0 times
Chuck
1 year ago
User 3: It's important to stay vigilant against these types of attacks.
upvoted 0 times
...
Shay
1 year ago
User 2: Definitely, we should configure the Web Server to deny requests involving them.
upvoted 0 times
...
Dalene
1 year ago
User 1: I agree, those hex-encoded characters look suspicious.
upvoted 0 times
...
...
Denny
1 year ago
But wouldn't using SSL authentication on Web Servers also add an extra layer of security?
upvoted 0 times
...
Francoise
1 year ago
Okay, let's see here. I don't think SSL authentication is gonna cut it for this one (C), and I'm not a big fan of active script detection either (D). Yep, gotta be option A all the way!
upvoted 0 times
Mayra
1 year ago
User 2: Yeah, configuring the Web Server to deny requests with 'hex encoded' characters is the way to go.
upvoted 0 times
...
Jamal
1 year ago
User 1: I agree, option A seems like the best choice.
upvoted 0 times
...
...
Michal
1 year ago
I disagree, I believe option B is more effective in detecting strange Unicode requests.
upvoted 0 times
...
Dewitt
1 year ago
Hmm, this one's tricky. I'm leaning towards B - setting up an IDS to catch those strange Unicode requests. Can't be too careful with these sneaky attacks, you know?
upvoted 0 times
...
Margarett
1 year ago
Ah, the classic obstructed URL attack. Gotta love how the bad guys try to sneak past our defenses with all those funky characters. I'd go with option A - keep those hex-encoded weirdos out of my web server!
upvoted 0 times
Lorrine
1 year ago
Ryann: Let's make sure our defenses are strong against those sneaky attacks.
upvoted 0 times
...
Kate
1 year ago
User 3: Definitely, we need to configure the Web Server to deny those requests.
upvoted 0 times
...
Ryann
1 year ago
User 2: I agree, option A sounds like the best way to block them from getting in.
upvoted 0 times
...
Stephanie
1 year ago
User 1: Yeah, those attackers sure do love their hex-encoded characters.
upvoted 0 times
...
...
Denny
1 year ago
I think option A is the best choice to protect from these attacks.
upvoted 0 times
...

Save Cancel