Website Security MCQs with Explanations

You can set disable_functions equal to a comma-delimited list of function names that you want to disable.

There may be classes inside the libraries that you’d rather not make available. You can prevent the use of these classes with the disable_classes directive.

This can be useful to prevent users’ scripts from consuming too much CPU time. If max_execution_time is set to 0, no time limit will be set.

This directive specifies, in megabytes, how much memory a script can use. Default value: 128M.

It is capable of displaying output like: Apache/2.2.11 (Ubuntu) Server at localhost Port 80.

Six options are available: Full, Major, Minimal, Minior, OS, and Prod. If it is set to Full ‘Apache/2.2.11 (Ubuntu) PHP/5.3.2 Server’ will be displayed.

Using the expose_php directive we can prevent PHP version details from being appended on our web server signature. When expose_php is disabled, the server signature will look like: Apache/2.2.11 (Ubuntu) Server.

Just change the .php to .html and your extension will change. This is used for security purpose.

This happened because safe mode often creates many problems as it resolves, largely due to the need for enterprise applications to use many of the features safe mode disables.

open_basedir = “/home/www/” is the correct answer to “Suppose all web material is located within the directory /home/www. To prevent users from viewing and manipulating files such as /etc/password, which one of the following statements should you use”. This question is standard in competitive examination syllabi for Website Security.