Which of the following is the BEST course of action when using a web application that has known vulnerabilities?

The correct answer is A. Deploy an application firewall. A web application firewall (WAF) is the best course of action when using a web application with known vulnerabilities, as it can filter, monitor, and block malicious traffic targeting those weaknesses. WAFs help mitigate threats such as SQL injection, cross-site scripting…

Submitted by kavita_s· Apr 18, 2026Information Security Risk Management

Question

Options

ADeploy an application firewall.
BMonitor application level logs.
CInstall anti-spyware software.
DDeploy host-based intrusion detection.

How the community answered

(23 responses)

A
74% (17)
B
17% (4)
C
4% (1)
D
4% (1)

Explanation

A web application firewall (WAF) is the best course of action when using a web application with known vulnerabilities, as it can filter, monitor, and block malicious traffic targeting those weaknesses. WAFs help mitigate threats such as SQL injection, cross-site scripting (XSS), and other web-based attacks until the vulnerabilities can be properly patched. While monitoring logs and intrusion detection can provide insights, they do not actively prevent exploitation like a WAF

Topics

#Risk Mitigation#Security Controls#Web Application Firewall#Vulnerability Management

Community Discussion

No community discussion yet for this question.

Full CISM Practice