Exposure of which configuration file can reveal FTP server settings and anonymous access configurations?

• A. httpd.conf
• B. sshd_config
• C. pure-ftpd.conf
• D. vsftpd.conf

Answer: (C)

Reading an FTP server’s configuration file can reveal how the server is set up, including whether anonymous access is allowed and what permissions it grants. The Pure-FTPd daemon uses a dedicated file, pure-ftpd.conf, to control its behavior, and it includes settings specifically about anonymous login, such as whether it’s permitted and what actions anonymous users can perform. Because this file directly governs anonymous access for the FTP service, exposing it would disclose the actual rules in place for anonymous connections as well as other related server options. The other files configure different services (web server, SSH) or, for another FTP daemon, a different set of FTP options, so they aren’t the source of the anonymous FTP configuration in this context.