Ethical Hacking Essentials Practice Test

What practice makes web servers vulnerable to various online attacks?

1. Apply unrestricted ACLs and allow remote registry administration

2. Use a closed and limited Access Control List

3. Restrict remote registry access to administrators only

4. Implement strict network segmentation

The correct answer is: Apply unrestricted ACLs and allow remote registry administration

Applying unrestricted access control lists (ACLs) and allowing remote registry administration creates vulnerabilities because it grants extensive permissions to users and systems that may not require such access. Unrestricted ACLs can enable malicious actors to exploit open access, leading to potential breaches where attackers have greater control over the server and network components. When remote registry administration is enabled without proper restrictions, it also opens up a pathway for attackers to modify system settings and configurations from afar, increasing the risk of unauthorized changes and exploitation. This approach contrasts starkly with restricted access methods, which limit permissions to only necessary users and systems, thereby minimizing potential attack vectors. Limited access controls, strict segmentation, and restricting registry access to administrators are all strategies aimed at reducing vulnerability and improving overall security. Such measures help to ensure that only authorized personnel can make changes, significantly lowering the likelihood of successful online attacks.