easyMultiple ChoiceObjective-mapped
SSCP Practice Question: If the web server is compromised, which of the…
Exhibit
Refer to the exhibit. Network diagram description: - Web server (192.168.1.10) connected to internal network. - Database server (192.168.1.20) connected to internal network. - Firewall allows HTTP (port 80) from external to Web server only. - No internal firewall between Web and database servers.
If the web server is compromised, which of the following is a likely immediate risk?
⚠ Common exam trap
ISC2 often tests the concept that a compromised web server is a pivot point to the database, and the trap here is that candidates mistakenly think 'loss of web application data' or 'compromise of user credentials' is immediate, when in fact those require additional steps after the initial foothold.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Direct compromise of the database server
When a web server is compromised, the immediate risk is direct compromise of the database server because the web server typically holds the database credentials (e.g., in a configuration file like wp-config.php or appsettings.json) and has a trusted network path to the database. An attacker can pivot from the web server to the database server using those credentials, often over port 3306 (MySQL) or 1433 (MSSQL), without needing to bypass additional authentication.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Direct compromise of the database server
Why this is correct
The lack of internal firewall allows the attacker to pivot to the database.
- ✗
Loss of web application data
Why it's wrong here
Web server data may be lost but the immediate risk is lateral movement to the database.
- ✗
Denial of service to the web server
Why it's wrong here
DoS is possible but not necessarily the immediate risk from compromise.
- ✗
Compromise of user credentials
Why it's wrong here
Credential theft is possible but not as immediate as database access.
Go deeper
Related to this question
About these practice questions
Courseiva writes every SSCP question from scratch — 920 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.