Question

A penetration tester has found that a user can access a protected folder in the var/www/html directory directly from the browser. Which of the following authorization layers does this vulnerability exist?

A. database server horizontal layer, hardware vertical layer

B. web server horizontal layer, middleware vertical layer

C. web server horizontal layer, app vertical layer

D. app server horizontal layer, app vertical layer

Answer 1

A penetration tester has found that a user can access a protected folder in the var/www/html directory directly from the browser web server

• web server horizontal layer, app vertical layer.
• web servers are any number of servers so put it in horizontal layer.
• Application is the vertical layer since it is particular and huge usage.
• Authorization is focus on the application so vertical layer must be application.
• In general horizontal layer contains more components and vertical layer is particular component and it has more importance..

Option c