CEH Web Application and Injection Attacks Practice Question
Which HTTP method is commonly used by WebDAV to upload files to a web server, and if misconfigured, could allow an attacker to upload malicious scripts?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
PUT
The PUT method allows uploading resources to the server, and if enabled without proper controls, can be exploited to upload malicious files.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
DELETE
Why it's wrong here
The DELETE method is specifically designed to remove a specified resource from the server. When a client sends a DELETE request to a URI, it instructs the server to permanently delete the resource identified by that URI. This operation is fundamentally destructive and has no function in creating or uploading new content, making it entirely unsuitable for file upload operations in WebDAV or standard HTTP.
- ✗
GET
Why it's wrong here
The GET method is used to request data from a specified resource. It is considered a "safe" method because it should only retrieve data and not alter the state of the server. Consequently, GET requests are strictly for fetching information, such as downloading a file or viewing a webpage, and cannot be utilized to transmit or upload new files to the server.
- ✗
POST
Why it's wrong here
While the POST method is commonly used to submit data to be processed to a specified resource, often resulting in a change in state or the creation of a new subordinate resource, it is not the standard method for direct file uploads in WebDAV. POST requests typically send data to a processing script or endpoint, where the server determines the resource's final URI. In contrast, WebDAV's file upload semantics require the client to specify the exact URI for the new or updated file.
- ✓
PUT
Why this is correct
The PUT method is the designated HTTP verb for uploading files in WebDAV because it requests that the enclosed entity be stored under the supplied Request-URI. If the URI refers to an existing resource, PUT replaces it; if the URI does not point to an existing resource, the server creates it. This idempotent behavior, where repeated identical requests have the same effect as a single request, makes PUT ideal for creating or updating files directly at a specified location.
Go deeper
Related to this question
About these practice questions
This CEH question is part of Courseiva's 870-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CEH practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CEH exam.