A website administrator wants to prevent SQL injection attacks against the company's customer database, which is referenced by the web server. Which two methods help prevent SQL injection attacks?…

Using load balancers with NAT helps distribute traffic and hide internal network topology, which can be part of a robust architecture, but it does not specifically prevent SQL injection attacks.

Input validation involves strictly checking, filtering, and sanitizing all user-supplied data before it is processed by the application or used in database queries, directly preventing malicious SQL statements from being executed.

Enforcing TLS 1.3 only ensures secure, encrypted communication between the client and server, protecting data in transit, but it does not prevent malicious SQL queries from being submitted through legitimate application input fields.

Using SSL certificates enables encrypted communication and verifies server identity, similar to TLS, but does not provide protection against SQL injection attacks targeting the application's logic or database queries.

A Web Application Firewall (WAF) inspects HTTP/S traffic, identifies and blocks common web exploits like SQL injection by detecting malicious patterns in requests before they reach the web server and database.