Courseiva
← CAS-005
Full test
easyMultiple ChoiceObjective-mapped

CAS-004 Practice Question: Which security issue is addressed by this…

Exhibit

Refer to the exhibit.
<Directory /var/www/html>
    Options -Indexes
    AllowOverride None
    Order allow,deny
    Allow from all
</Directory>

Which security issue is addressed by this configuration?

⚠ Common exam trap

The CAS-004 exam often tests the misconception that 'Options -Indexes' blocks all file access or is related to CGI or SSI, when in reality it only suppresses the automatic directory listing generated by mod_autoindex.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

Prevents directory listing

The configuration directive 'Options -Indexes' in Apache HTTP Server explicitly disables directory indexing. When a client requests a directory without an index file (e.g., index.html), the server will return a 403 Forbidden error instead of generating an HTML page listing the directory's contents. This directly prevents directory listing, a common information disclosure vulnerability.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • ✗

    Enables server-side includes

    Why it's wrong here

    Server-side includes require `+Includes`, not present.

  • ✓

    Prevents directory listing

    Why this is correct

    `-Indexes` explicitly disables directory listing.

  • ✗

    Blocks access to all files

    Why it's wrong here

    `Allow from all` permits access; it does not block.

  • ✗

    Enables CGI execution

    Why it's wrong here

    CGI execution requires `+ExecCGI`, not shown here.

About these practice questions

This CAS-005 question is part of Courseiva's 968-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

JA

Written by Johnson Ajibi, MSc IT Security

Senior Network & Security Engineer · founder of Courseiva

This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.