Question

I do not know what web server is being used. All I have is the question displayed. If I had to guess, IIS is the web server.

A credentialed scan has discovered a potential information disclosure vulnerability on a web server. A security administrator reviews the following associated logs to determine the validity of the result Web Server Logs 192.168.1.10 - GET././C/Users\Administrator Documents Server pfx HTTP/1.0" - 200 DLP Logs PERMIT 192.168.1.10 Serverpfx Which of the following should the administrator infer from the above information? IIS needs to be patched for directory traversal The vulnerability is a false positive The DLP system provides an adequate compensating control. OA B. OD An exception must be configured in the vulnerability scanner.

Answer 1

Ans c) The DLP system provides an adequate compensating control

IIS is a web server that runs on the Microsoft .NET platform on the Windows OS. While it’s possible to run IIS on Linux and Macs using Mono, it’s not recommended and will likely be unstable. . It’s versatile and stable, and it’s been widely used in production for many years. Version 10 is the most current.