Cisco
300-215 · Question #42
A security team needs to prevent a remote code execution vulnerability. The vulnerability can be exploited only by sending '${' string in the HTTP request. WAF rule is blocking '${', but system engine
Sign in or unlock 300-215 to reveal the answer and full explanation for question #42. The question stem and answer options stay visible for context.
Submitted by viktor_hu· Mar 6, 2026Incident Response Techniques
Question
A security team needs to prevent a remote code execution vulnerability. The vulnerability can be exploited only by sending ‘${‘ string in the HTTP request. WAF rule is blocking ‘${‘, but system engineers detect that attackers are executing commands on the host anyway. Which action should the security team recommend?
Options
- AEnable URL decoding on WAF.
- BBlock incoming web traffic.
- CAdd two WAF rules to block 'S' and '{' characters separately.
- DDeploy antimalware solution.
Unlock 300-215 to see the answer
You've previewed enough free 300-215 questions. Unlock 300-215 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#WAF bypass#URL encoding#remote code execution#vulnerability mitigation