An input validation and exception handling vulnerability has been discovered on a critical web- based system. Which of the following is MOST suited to quickly implement a control?

The correct answer is A. Add a new rule to the application layer firewall. An application layer firewall (such as a Web Application Firewall, or WAF) can inspect HTTP/HTTPS traffic and block malicious inputs (for example, SQL-injection or XSS patterns) without changing the underlying application code, so it can be deployed quickly as an interim For a…

Submitted by yasin.bd· Mar 5, 2026Security Architecture and Engineering

Question

Options

AAdd a new rule to the application layer firewall
BBlock access to the service
CInstall an Intrusion Detection System (IDS)
DPatch the application source code

How the community answered

(23 responses)

A
74% (17)
B
9% (2)
C
13% (3)
D
4% (1)

Explanation

An application layer firewall (such as a Web Application Firewall, or WAF) can inspect HTTP/HTTPS traffic and block malicious inputs (for example, SQL-injection or XSS patterns) without changing the underlying application code, so it can be deployed quickly as an interim For a critical system where immediate patching may be risky or time-consuming, adding a new rule to the WAF or application-layer firewall is the fastest way to reduce exposure while the application source-code patch is developed and tested.

Topics

#Input validation#Web application security#WAF#Vulnerability mitigation

Community Discussion

No community discussion yet for this question.

Full CISSP Practice