ISC2 CAP Exam - Topic 7 Question 62 Discussion

Actual exam question for ISC2's CAP exam

Question #: 62
Topic #: 7

[All CAP Questions]

Based on the screenshot below, which of the following statements is true?

HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 359987

Cache-Control: max-age=604800

Content-Type: text/html; charset=UTF-8

Date: Fri, 02 Dec 2022 18:33:05 GMT

Expires: Fri, 09 Dec 2022 18:33:05 GMT

Last-Modified: Mon, 28 Nov 2022 14:33:18 GMT

Server: Microsoft-IIS/8.0

X-AspNet-Version: 2.0.50727

Vary: Accept-Encoding

X-Powered-By: ASP.NET

Content-Length: 1256

AThe application is using an outdated server technology

BThe application is disclosing the server version

CThe application is disclosing the version of the framework used

DAll of the above

Show Suggested Answer

Suggested Answer: A

by Ma at Jan 05, 2023, 08:23 AM

Limited Time Offer

25%

Off

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carisa

5 months ago

All of the above seems accurate based on the info provided.

upvoted 0 times

...

Kerrie

5 months ago

I think it's just the server version being shown, not the framework.

upvoted 0 times

...

Leslie

6 months ago

Wait, is it really disclosing the framework version?

upvoted 0 times

...

Nada

6 months ago

Totally agree, that's outdated tech for sure!

upvoted 0 times

...

Rutha

6 months ago

The server is running Microsoft-IIS/8.0, pretty old.

upvoted 0 times

...

Kris

6 months ago

I practiced a similar question, and I think the right answer might be D, but I’m not completely confident.

upvoted 0 times

...

Mona

6 months ago

I feel like all of them could be correct, especially with the framework version being disclosed in option C.

upvoted 0 times

...

Yvonne

6 months ago

I'm not sure about A, but I remember something about IIS 8.0 being older technology.

upvoted 0 times

...

Andra

6 months ago

I think option B is definitely true since the server version is mentioned in the response.

upvoted 0 times

...

Queen

6 months ago

The options seem a bit tricky. I'll need to read through them slowly and make sure I understand the differences.

upvoted 0 times

...

Mable

6 months ago

Okay, I've got this. Based on the diagram, I can see that router R3 is connected to both LSP A and LSP B. So the correct answer must be that R3 is an LSR for both LSP A and LSP B.

upvoted 0 times

...

Tyra

6 months ago

I remember practicing questions about AES, and I think it can use a 256-bit key for encryption. Seems like a common detail.

upvoted 0 times

...

Lelia

6 months ago

I'm uncertain about enforcing the rule without considering community support. Can we bend the rules, or is that a slippery slope?

upvoted 0 times

...

Lachelle

12 months ago

I'm just wondering if the server is running Windows 98 and .NET 1.0. That would really take me back to the good old days of dial-up and AOL.

upvoted 0 times

Cassi

10 months ago

C) The application is disclosing the version of the framework used

upvoted 0 times

...

Billye

10 months ago

B) The application is disclosing the server version

upvoted 0 times

...

Theola

10 months ago

A) The application is using an outdated server technology

upvoted 0 times

...

Marguerita

10 months ago

User3: D) All of the above

upvoted 0 times

...

Tanja

10 months ago

C) The application is disclosing the version of the framework used

upvoted 0 times

...

Joseph

10 months ago

B) The application is disclosing the server version

upvoted 0 times

...

Fatima

10 months ago

User2: C) The application is disclosing the version of the framework used

upvoted 0 times

...

Alonzo

11 months ago

A) The application is using an outdated server technology

upvoted 0 times

...

Colette

11 months ago

User1: B) The application is disclosing the server version

upvoted 0 times

...

Sylvia

12 months ago

Haha, the developers must have been really proud of their server setup. 'Look at all the fancy stuff we're running!' Not the best idea when it comes to security, though.

upvoted 0 times

...

Magdalene

12 months ago

Yep, I agree. Exposing that kind of version information is a big no-no. It's like handing the bad guys a roadmap to your system vulnerabilities. Time to tighten up that security!

upvoted 0 times

...

Shaquana

12 months ago

I agree with Casie, the answer is D. It's definitely disclosing all the information mentioned.

upvoted 0 times

...

Kina

12 months ago

Wow, this question is a no-brainer! The application is clearly disclosing too much information, like the server version and the .NET framework version. That's a security risk waiting to happen.

upvoted 0 times