Skip to content

CS KAIROS · LEARNING LIBRARY

M13 · Hacking Web Servers · Q&A

Check understanding with original scenarios and a reason for every option. These answers do not establish exam or practical readiness.

Scenario questions

ceh-m13-hardening-q1 · Original practice

Does CSP on the homepage make a database backup safe to publish?

JavaScript is off: read the answer and explanation

B

CSP does not encrypt public files.
Browser policy does not define which data may be public.
Unlinked does not mean inaccessible.
An extension is not access control.

ceh-m13-hardening-q2 · Original practice

After adding nosniff to configuration, what remains?

JavaScript is off: read the answer and explanation

C

One header addresses a specific risk.
The configuration still needs evidence of effect.
This checks deployment and behavior.
Updates address different issues and remain necessary.

Continue to safe practice →