Securing Web Servers: Priority for Common Threats

312-50v12 By islever Editorial Last updated

Hacking Web Servers

Short answer

C Regularly updating and patching the server software is the priority action to secure the web server from common threats.

Question

You have been hired as an intern at a start-up company. Your first task is to help set up a basic web server for the company's new website. The team leader has asked you to make sure the server is secure from common threats. Based on your knowledge from studying for the CEH exam, which of the following actions should be your priority to secure the web server?
  1. Limiting the number of concurrent connections to the server
  2. Installing a web application firewall
  3. Regularly updating and patching the server software Correct Answer
  4. Encrypting the company's website with SSL/TLS

Key Takeaways

The core concept tested is server hardening priorities, with the common trap being the confusion between data protection (SSL) and infrastructure security (patching).

This question addresses the primary action required to secure a web server against common threats. The correct answer is C because patching vulnerabilities is the foundational step in hardening the system.

Common mistake: Many candidates select D (SSL/TLS) because they prioritize data encryption over system integrity, failing to recognize that an unpatched server is vulnerable regardless of SSL status.

Expert Analysis

Why the Answer Is Correct

Regularly updating and patching server software (Option C) is the most critical priority for securing a web server from common threats. This practice directly addresses known vulnerabilities in the operating system, web server software (like Apache or Nginx), and underlying libraries. Without these patches, the server remains exposed to exploits such as remote code execution, which no amount of network-level security can prevent.

Why the Other Options Are Wrong

While installing a WAF (Option B) provides a layer of defense, it cannot protect against zero-day vulnerabilities or flaws in the OS itself if the server is not patched. Limiting concurrent connections (Option A) helps mitigate Denial-of-Service attacks but does not address the root cause of system compromise. Encrypting the website with SSL/TLS (Option D) protects data in transit but does not secure the server's internal components or prevent attackers from exploiting software bugs to gain control of the machine.

Community Comment Notes

The community debate highlights a common misunderstanding of 'security.' Users like obadawi and LoveBug4 argue for SSL/TLS, believing data protection is the top priority. However, experienced analysts like insaniunt and Mos3ab correctly emphasize that without a patched, secure foundation, encryption is irrelevant if the server is already compromised. As blehbleh noted, the focus must be on protecting the server itself first.

Exam Strategy

Always distinguish between protecting the data (confidentiality) and protecting the system (integrity/availability). When asked about securing the 'server' or 'system,' prioritize patching and hardening before considering perimeter defenses.

Frequently Asked Questions

Why isn't SSL/TLS the first priority?

SSL/TLS encrypts data in transit but does not fix vulnerabilities in the server software that allow attackers to take control.

Is a WAF better than patching?

No. A WAF filters traffic but cannot protect against vulnerabilities in the underlying OS or application code that hasn't been patched.

More 312-50v12 FAQ →

Community Votes

C
71%
D
29%

71% of anonymous learners picked answer C. Votes are pick records left by other test-takers — they are not the verified answer.

Discussion 5 contributions

Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.

From public community threads 5

  1. insaniunt 👍 3 Answered C
    C. Regularly updating and patching the server software. Regularly updating and patching the server software is a critical security measure.
  2. Mos3ab 👍 1 Answered C
    Regularly updating and patching your server software is crucial for maintaining security. Software updates often include fixes for known vulnerabilities that attackers might exploit. By keeping your server and its components up to date, you reduce the risk of compromise from known threats. This practice is widely recommended in web server security guidelines. While installing a web application firewall (Option B) and encrypting the website with SSL/TLS (Option D) are also important security measures, they address specific aspects of security. Limiting the number of concurrent connections (Option A) can help prevent certain types of attacks but doesn't address underlying vulnerabilities. Therefore, ensuring your server software is regularly updated and patched should be a top priority to protect against a wide range of potential threats.
  3. blehbleh 👍 1 Answered C
    This is C, I am really starting to think people don't know how to read. The question states "server is secure from common threats" you are protecting the server, this is done with regular updates and patches.
  4. obadawi 👍 1 Answered D
    priority would be SSL/TLS encryption, regular updates and patching is an on-going task that should be going all the times..
  5. LoveBug4 👍 1 Answered D
    For any website, first priority should be SSL/TLS

Reader comments & corrections

No reader corrections yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Comprehensive Network Scanning Sequence

S-grade

NetBIOS Enumeration on IPv6 Networks

S-grade

Ethical Hacker Liability and Organizational Risk Acceptance

S-grade

Least Likely Social Engineering Method Based on Footprinting Data

S-grade

← Back to 312-50v12 Study Guide