The Chief Executive Officer (CEO) has asked the IT administrator to protect the externally facing web server from SQL injection attacks and ensure the backend database server is monitored for…

Question

Options

• AWAF and DAM
• BUTM and NIDS
• CDAM and SIEM
• DUTM and HSM
• EWAF and SIEM

• A
  93% (51)
• B
  2% (1)
• C
  4% (2)
• D
  2% (1)

Explanation

WAF (Web Application Firewall) + DAM (Database Activity Monitoring) (A) directly maps to both requirements. A WAF sits in front of the web server and inspects HTTP/HTTPS traffic at the application layer, identifying and blocking SQL injection payloads before they reach the application. DAM continuously monitors all database queries and connections, establishes a behavioral baseline, alerts on anomalous activity, and-critically-can enforce active blocking rules to terminate suspicious sessions or queries in real time. UTM (B, D) is a general-purpose network appliance not specialized for SQL injection or database-level monitoring. NIDS (B) is passive detection only with no database-layer visibility. SIEM (C, E) aggregates and correlates log data for alerting but cannot actively terminate database connections. HSM (D) manages cryptographic keys and has no traffic inspection or monitoring role. DAM's active enforcement capability is what differentiates it from a SIEM for this specific use case.

No community discussion yet for this question.