CompTIA CySA+ Practice Test

Disable ads (and more) with a membership for a one time $2.99 payment

Enhance your cybersecurity skills with the CompTIA CySA+ Exam preparation. Dive into multiple choice questions with hints and explanations, and get ready for success!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.

To prevent sensitive information from being disclosed by your web server, which configuration should you change?

Set "VerifyNormalization" to 1
Set "RemoveServerHeader" to 1
Set "EnableLogging" to 1
Set "PerProcessLogging" to 1

The correct answer is: Set "RemoveServerHeader" to 1

Configuring the web server to set "RemoveServerHeader" to 1 is an essential step in enhancing security by preventing the disclosure of sensitive information. The server header typically contains details about the web server software and version in use, which can provide attackers with valuable information for exploiting vulnerabilities specific to that software. By removing this header, you limit the information available to potential attackers, thus reducing the risk of targeted attacks against your web server. Enhancing your server's security by hiding such details is a proactive measure, as it helps to obscure the server's identity and reduces the potential attack surface. While the other configurations can be relevant in a broader security context, such as logging capabilities, they do not directly prevent sensitive information disclosure in the same way that removing the server header does.