ISC2 CAP Exam - Topic 7 Question 62 Discussion

Actual exam question for ISC2's CAP exam

Question #: 62
Topic #: 7

[All CAP Questions]

Based on the screenshot below, which of the following statements is true?

HTTP/1.1 200 OK

Accept-Ranges: bytes

Age: 359987

Cache-Control: max-age=604800

Content-Type: text/html; charset=UTF-8

Date: Fri, 02 Dec 2022 18:33:05 GMT

Expires: Fri, 09 Dec 2022 18:33:05 GMT

Last-Modified: Mon, 28 Nov 2022 14:33:18 GMT

Server: Microsoft-IIS/8.0

X-AspNet-Version: 2.0.50727

Vary: Accept-Encoding

X-Powered-By: ASP.NET

Content-Length: 1256

AThe application is using an outdated server technology

BThe application is disclosing the server version

CThe application is disclosing the version of the framework used

DAll of the above

Show Suggested Answer

Suggested Answer: A

by Ma at Jan 05, 2023, 08:23 AM

Limited Time Offer

25%

Off

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Carisa

4 months ago

All of the above seems accurate based on the info provided.

upvoted 0 times

...

Kerrie

4 months ago

I think it's just the server version being shown, not the framework.

upvoted 0 times

...

Leslie

4 months ago

Wait, is it really disclosing the framework version?

upvoted 0 times

...

Nada

4 months ago

Totally agree, that's outdated tech for sure!

upvoted 0 times

...

Rutha

4 months ago

The server is running Microsoft-IIS/8.0, pretty old.

upvoted 0 times

...

Kris

5 months ago

I practiced a similar question, and I think the right answer might be D, but I’m not completely confident.

upvoted 0 times

...

Mona

5 months ago

I feel like all of them could be correct, especially with the framework version being disclosed in option C.

upvoted 0 times

...

Yvonne

5 months ago

I'm not sure about A, but I remember something about IIS 8.0 being older technology.

upvoted 0 times

...

Andra

5 months ago

I think option B is definitely true since the server version is mentioned in the response.

upvoted 0 times

...

Queen

5 months ago

The options seem a bit tricky. I'll need to read through them slowly and make sure I understand the differences.

upvoted 0 times

...

Mable

5 months ago

Okay, I've got this. Based on the diagram, I can see that router R3 is connected to both LSP A and LSP B. So the correct answer must be that R3 is an LSR for both LSP A and LSP B.

upvoted 0 times

...

Tyra

5 months ago

I remember practicing questions about AES, and I think it can use a 256-bit key for encryption. Seems like a common detail.

upvoted 0 times

...

Lelia

5 months ago

I'm uncertain about enforcing the rule without considering community support. Can we bend the rules, or is that a slippery slope?

upvoted 0 times

...

Lachelle

10 months ago

I'm just wondering if the server is running Windows 98 and .NET 1.0. That would really take me back to the good old days of dial-up and AOL.

upvoted 0 times

Cassi

8 months ago

C) The application is disclosing the version of the framework used

upvoted 0 times

...

Billye

8 months ago

B) The application is disclosing the server version

upvoted 0 times

...

Theola

8 months ago

A) The application is using an outdated server technology

upvoted 0 times

...

Marguerita

9 months ago

User3: D) All of the above

upvoted 0 times

...

Tanja

9 months ago

C) The application is disclosing the version of the framework used

upvoted 0 times

...

Joseph

9 months ago

B) The application is disclosing the server version

upvoted 0 times

...

Fatima

9 months ago

User2: C) The application is disclosing the version of the framework used

upvoted 0 times

...

Alonzo

9 months ago

A) The application is using an outdated server technology

upvoted 0 times

...

Colette

10 months ago

User1: B) The application is disclosing the server version

upvoted 0 times

...

Sylvia

10 months ago

Haha, the developers must have been really proud of their server setup. 'Look at all the fancy stuff we're running!' Not the best idea when it comes to security, though.

upvoted 0 times

...

Magdalene

10 months ago

Yep, I agree. Exposing that kind of version information is a big no-no. It's like handing the bad guys a roadmap to your system vulnerabilities. Time to tighten up that security!

upvoted 0 times

...

Shaquana

10 months ago

I agree with Casie, the answer is D. It's definitely disclosing all the information mentioned.

upvoted 0 times

...

Kina

10 months ago

Wow, this question is a no-brainer! The application is clearly disclosing too much information, like the server version and the .NET framework version. That's a security risk waiting to happen.

upvoted 0 times