wklab97

Lab #1 - Assessment Worksheet

Evaluating Web Server Vulnerabilities Course Name and Number: ________________________________________________________________

Student Name: ________________________________________________________________

Instructor Name: ________________________________________________________________

Lab Due Date: ________________________________________________________________

Lab Assessment Questions

1. What are some of the greatest risks businesses face when connecting to the web? Why?

2. Why is it critical to perform periodic web-application vulnerability assessments and penetration tests?

3. Why might connecting your web servers and web applications to the Internet be like opening Pandora’s Box?

4. What does the Skipfish application do, and why is it a good security tool for web servers and web application testing?

5. What is tcpdump, and why is it a good tool for testing the Ubuntu Linux web server and web application security?

6. What does the Firefox Live HTTP Headers plug-in application do, and why is

this a good tool for web server and web application security testing?

7. What does using the -h switch for tcpdump and skipfish do?

8. What information can you determine from the ifconfig -a command?

1. Course Name andNumber:
2. Student Name:
3. Instructor Name:
4. LabDue Date:
5. Q1:
6. Q2:
7. Q3:
8. Q4:
9. Q5:
10. Q6:
11. Q7:
12. Q8: