CAS-005 · Question #333
While performing mandatory monthly patch updates on a production application server, the security analyst reports an instance of buffer overflow for a new application that was migrated to the cloud…
The correct answer is A. Configure firewall rules to block all external traffic. B. Enable input validation for all fields. Configure firewall rules to block all external traffic: Since the security policy requires that only internal users have access to the application, configuring firewall rules to block all external traffic ensures that the application is not exposed to unauthorized users on the…
Question
While performing mandatory monthly patch updates on a production application server, the security analyst reports an instance of buffer overflow for a new application that was migrated to the cloud and is also publicly exposed. Security policy requires that only internal users have access to the application. Which of the following should the analyst implement to mitigate the issues reported? (Choose two.)
Options
- AConfigure firewall rules to block all external traffic.
- BEnable input validation for all fields.
- CEnable automatic updates to be installed on all servers.
- DConfigure the security group to enable external traffic.
- ESet up a DLP policy to alert for exfiltration on all application servers.
- FEnable nightly vulnerability scans.
How the community answered
(36 responses)- A69% (25)
- C17% (6)
- D3% (1)
- E3% (1)
- F8% (3)
Explanation
Configure firewall rules to block all external traffic: Since the security policy requires that only internal users have access to the application, configuring firewall rules to block all external traffic ensures that the application is not exposed to unauthorized users on the internet. This mitigates unauthorized access risks. Enable input validation for all fields: Buffer overflows often exploit improper or lack of input validation. Enabling strict input validation ensures that only properly formatted data is accepted, preventing malicious input designed to exploit vulnerabilities in the application.
Community Discussion
No community discussion yet for this question.