Home
Topics
Topics Archive
Security Resources
Quiz: Secure Web directories and development, answer No. 1

Quiz: Secure Web directories and development, answer No. 1

The correct answer is:
c. E: \inetpub\wwwroot\myserver\scripts
E: \inetpub\wwwroot\myserver\static
You must put your Web content on a separate volume or drive from your operating system, so the answers with directories located on the C drive are incorrect. In order to follow the principle of least privilege, you must separate your scripts from your static content so that only files in the scripts directory are given permission to execute. Finally, you do not want to give executables permission to run on your Web server.

<< Back to quiz

More News and Tutorials

Articles

Related glossary terms

Terms for Whatis.com - the technology online dictionary

This was first published in June 2005

Join the conversationComment

Share

Comments

Results

Contribute to the conversation

All fields are required. Comments will appear at the bottom of the article.

More from Related TechTarget Sites

Cloud Security
Consumerization
Financial Security
SMB Security
Security AU
Security IN
Computer Weekly

Cloud Security
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
- How to use PCI SSC supplement to achieve PCI compliance in the cloud
  
  Ed Moyle examines highlights of the recently released PCI SSC information supplement that offers new details on achieving PCI compliance in the cloud.
- Cloud API security risks: How to assess cloud service provider APIs
  
  The CSA says cloud API security is a top threat to cloud environments. Expert Dave Shackleford explains how to assess the security of providers' APIs.
Consumerization
- How limited mobile device support can help IT handle consumerization
  
  To deal with consumerization, some companies limit mobile device support to specific devices because it makes management and app development easier.
- BlackBerry, VMware deliver dual persona features for mobile devices
  
  BlackBerry's Secure Work Space for iOS and Android will help heavily regulated companies or those searching for extra security to better support BYOD.
- How the consumerization of the enterprise has affected two firms
  
  The consumerization of the enterprise looks different in every company. Some firms are more open to new technologies and ways of working than others.
searchFinancialSecurity
- PayPal CISO: Laws must foster better cybersecurity information sharing
  
  PayPal's Michael Barrett says many firms fear misuse of shared cybersecurity data. He also discusses the evolution of PCI DSS and mobile payment security.
- Cybergang plans to use Trojan against U.S. banks
  
  A cybergang in Eastern Europe revealed plans to attack U.S. banks with a Gozi-like Trojan, according to RSA.
- Improved Shylock Trojan targets banking users
  
  The latest variant of the banking Trojan is causing numerous problems, Symantec said.
searchMidmarketSecurity
- Windows Phone 7 security: Assessing WP7 security features
  
  Windows Phone 7 security features are proving to be a mixed bag. Sam Cattle assesses the enterprise security pros and cons of the latest Windows mobile platform.
- Choosing the best security certifications for your career
  
  Whether starting your career or planning your next step as an IT security professional, this tip will guide you toward the best certifications for your interests and experience.
- Midmarket security tutorials
  
  SearchMidmarketSecurity.com’s tutorials offer IT professionals in-depth lessons and technical advice on the hottest topics in the midmarket IT security industry. Through our tutorials we seek to provide site members with the foundational knowledge needed to deal with the increasingly challenging job of keeping their organizations secure.
searchSecurityAU
- Exploit kits evolved: How to defend against the latest attack toolkits
  
  Expert Nick Lewis details how automated exploit kits are evolving and offers mitigations for the latest methods employed by these attack toolkits.
- May 2013 Patch Tuesday fixes IE8 zero day; Adobe tightens ColdFusion
  
  The software giant's May 2013 Patch Tuesday update permanently fixes the IE8 zero-day flaw found in the Dept. of Labor website attack.
- Can self-managed cloud security controls ease enterprise concerns?
  
  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.
Information Security
- BYOD: Securing the risk to access the cost benefits
  
  Bring-your-own-device schemes offer businesses the opportunity to cut the costs and improve user experiences, but benefits can be dwarfed by the risks.
- Microsoft offers 'fix' for latest Internet Explorer zero day
  
  Microsoft released a temporary fix to mitigate attacks using the most recent Internet Explorer 8 zero day vulnerability.
- Mobile apps development: New threats or same security rules apply?
  
  Two security experts get up on their soap box about the steps software teams should take to secure applications throughout the apps' lifecycle.
Computer Weekly
- Union slams Aviva’s offshore plan
  
  Union Unite has accused Aviva of betraying UK workers after it emerged that 600 of its 2,000 job cuts are being relocated in India
- Twitter uses open source to automate security
  
  Twitter is increasingly using open source automation tools to ensure security processes are taken care of in all the code it produces
- Tech City startups struggling to acquire capital for further growth
  
  One-third of businesses in London’s Tech City are struggling to develop due to a dearth of capital and skills

All Rights Reserved,Copyright 2000 - 2013, TechTarget