CCSP · Question #355
Your application has been a continued target for SQL injection attempts. Which of the following technologies would be best used to combat the likeliness of a successful SQL injection exploit from occu
The correct answer is B. WAF. A Web Application Firewall (WAF) is specifically designed to protect web applications from common attacks like SQL injection by filtering and monitoring HTTP traffic.
Question
Your application has been a continued target for SQL injection attempts. Which of the following technologies would be best used to combat the likeliness of a successful SQL injection exploit from occurring? Response:
Options
- AXML accelerator
- BWAF
- CSandbox
- DFirewall
How the community answered
(24 responses)- B88% (21)
- C4% (1)
- D8% (2)
Why each option
A Web Application Firewall (WAF) is specifically designed to protect web applications from common attacks like SQL injection by filtering and monitoring HTTP traffic.
An XML accelerator is used to optimize XML processing performance, not to protect against SQL injection attacks.
A Web Application Firewall (WAF) inspects HTTP/S traffic and can detect and block web-based attacks such as SQL injection, cross-site scripting (XSS), and other OWASP Top 10 vulnerabilities. It acts as a reverse proxy, sitting in front of web servers to protect applications from malicious input and exploit attempts.
A sandbox provides an isolated environment for executing untrusted code or applications, which is not primarily designed to prevent SQL injection attempts against a production web application.
A traditional network firewall operates at the network and transport layers, primarily filtering traffic based on IP addresses and ports, and lacks the application layer visibility needed to detect and mitigate SQL injection.
Concept tested: Web Application Firewall (WAF) for SQL Injection
Source: https://learn.microsoft.com/en-us/azure/web-application-firewall/overview
Topics
Community Discussion
No community discussion yet for this question.