Which of the following BEST mitigates the risk of SQL injection attacks against applications exposed to the internet?

The correct answer is D. Web application firewall (WAF). A Web Application Firewall (WAF) is the best mitigation against SQL injection attacks, as it specifically filters and monitors HTTP traffic to and from a web application, identifying and blocking malicious requests that could exploit vulnerabilities such as SQL injection.

Submitted by akirajp· Apr 18, 2026Protection of Information Assets

Question

Options

ASQL server hardening
BPatch management program
CSQL server physical controls
DWeb application firewall (WAF)

How the community answered

(30 responses)

A
3% (1)
B
3% (1)
D
93% (28)

Explanation

A Web Application Firewall (WAF) is the best mitigation against SQL injection attacks, as it specifically filters and monitors HTTP traffic to and from a web application, identifying and blocking malicious requests that could exploit vulnerabilities such as SQL injection.

Topics

#SQL injection#Web Application Firewall#Application security#Threat mitigation

Community Discussion

No community discussion yet for this question.

Full CISA Practice