ISC2 CISSP Exam - Topic 4 Question 16 Discussion

Actual exam question for ISC2's CISSP exam

Question #: 16
Topic #: 4

A company-wide penetration test result shows customers could access and read files through a web browser. Which of the following can be used to mitigate this vulnerability?

AEnforce the chmod of files to 755.

BEnforce the control of file director/ listings.

CImplement access control on the web server.

DImplement Secure Sockets Layer (SSL) certificates throughout the web server.

Show Suggested Answer

Suggested Answer: B

by Mirta at May 03, 2022, 05:41 AM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Maurine

4 months ago

I disagree, file directory control is crucial too.

upvoted 0 times

...

Jeanice

4 months ago

Wait, customers could access files? That's wild!

upvoted 0 times

...

Keneth

4 months ago

SSL certificates won't fix this issue at all.

upvoted 0 times

...

Walker

4 months ago

I think enforcing chmod to 755 is a good start, but not enough.

upvoted 0 times

...

Ettie

5 months ago

Definitely need to implement access control on the web server.

upvoted 0 times

...

Ressie

5 months ago

SSL certificates are important for encryption, but I don't think they directly address file access issues like this one.

upvoted 0 times

...

Lennie

5 months ago

I feel like enforcing control of file directory listings could help, but I can't recall the exact details on how that works.

upvoted 0 times

...

Leonora

5 months ago

I think implementing access control on the web server is crucial, similar to a practice question we did about securing sensitive files.

upvoted 0 times

...

Micah

5 months ago

I remember we discussed file permissions in class, but I'm not sure if 755 is enough to prevent access.

upvoted 0 times

...

Olive

5 months ago

Hmm, this looks like a tricky accounting question. I'll need to carefully review the information provided and think through the relevant accounting principles.

upvoted 0 times

...

Lucia

5 months ago

The key here is identifying the specific term for a hotel's main entrance or waiting area. I'm pretty sure the correct answer is C - lobby.

upvoted 0 times

...

Major

5 months ago

Okay, I think I've seen this URI before in the Webex documentation. Let me double-check that.

upvoted 0 times

...

Whitney

5 months ago

No problem, I've done this kind of thing before. I'll just navigate to the item, find the BOM, and then use the copy function to create a new one. Shouldn't be too difficult.

upvoted 0 times

...