Module 7: Hacking Web Servers

What is the primary purpose of hacking a web server?

• To improve website speed

• To test new security updates

• To gain unauthorised access to sensitive data and websites

• To create backup copies of files

Which of the following is NOT a method of attack used on web servers?

• SYN flood

• Port scanning

• Directory traversal

• Defragmentation

What type of attack involves injecting malicious SQL code into a web server's database?

• File Inclusion

• SQL Injection

• Remote Code Execution

• Brute Force Attack

Which attack attempts to guess usernames and passwords to gain unauthorised access?

• Sniffing

• SQL Injection

• Brute Force Attack

• Directory Traversal

What does the Directory Traversal attack attempt to access?

• Files and directories outside of the web server's root directory

• User login information

• Encrypted network packets

• Web application source code

Which of the following can attackers use to capture and analyse network packets?

• Protocol analyser

• SQL Injection tool

• Directory scanner

• Encryption decryption key

Which method can web users employ to ensure secure communication between the browser and server?

• SYN flooding

• Using authenticated and encrypted networks

• Brute force attacks

• Packet sniffing

What does the Remote Code Execution attack allow an attacker to do?

• Steal credentials

• Execute malicious code on a web server

• Read encrypted files

• Launch a SYN flood attack

Which of the following is a defence mechanism against packet sniffing?

• Clear text transmission

• Using encryption

• SQL Injection

• SYN flood attacks

What can an attacker achieve with a File Inclusion attack?

• Access to external files in the server’s code

• Disabling security patches

• Sending spam emails

• Modifying database records