Valid 312-50v13 Dumps shared by EduDump.com for Helping Passing 312-50v13 Exam! EduDump.com now offer the newest 312-50v13 exam dumps, the EduDump.com 312-50v13 exam questions have been updated and answers have been corrected get the newest EduDump.com 312-50v13 dumps with Test Engine here:
Why should the security analyst disable/remove unnecessary ISAPI filters?
Correct Answer: B
ISAPI (Internet Server Application Programming Interface) filters are DLLs used to extend the functionality of Microsoft IIS (Internet Information Services). If unnecessary or outdated ISAPI filters are enabled, they can introduce vulnerabilities or backdoors that attackers may exploit to launch web server-based attacks. From the CEH v13 Official Courseware: Module 14: Hacking Web Servers Section: Web Server Vulnerabilities Subsection: Common Web Server Misconfigurations CEH v13 states: "Unnecessary ISAPI filters and extensions should be disabled or removed, as they may introduce unneeded attack surfaces on the web server. Attackers may exploit vulnerabilities in these filters to gain unauthorized access, execute code remotely, or escalate privileges on the server." This is part of a broader hardening strategy to reduce the web server's attack surface. Incorrect Options: A). Social engineering involves manipulating people, not software vulnerabilities. C). Jailbreaking refers to bypassing restrictions on mobile devices. D). Wireless attacks are unrelated to web server software components. Reference:CEH v13 Study Guide - Module 14: Hacking Web Servers # Topic: "Disabling Unnecessary Services and ISAPI Filters"Microsoft IIS Security Best Practices - Official Documentation ======