ISAPI filters can potentially expose a webserver to what kind of attacks?

• A. Webserver attacks.
• B. DNS hijacking.
• C. Phishing attacks.
• D. Physical tampering.

Answer: (A)

ISAPI filters run inside the web server’s process and operate with the server’s privileges. If a filter is vulnerable or compromised, it can execute code, read or modify requests and responses, or otherwise take control of the web server itself. That makes the most direct and likely risk a web server attack, since any breach through a filter translates into the ability to attack or take over the server.

DNS hijacking targets the domain name system, not the web server process. Phishing is a user-focused social-engineering attack, not a server-technical vulnerability. Physical tampering involves hardware or infrastructure, not the software components running inside the server.