AXSS vulnerability was reported on one of the non-sensitive/non-mission-critical public websites of a company. The security department confirmed the finding and needs to provide a recommendation to th

Question

Options

• AImplement an IPS in front of the web server.
• BEnable MFA on the website.
• CTake the website offline until it is patched.
• DImplement a compensating control in the source code.
• EConfigure TLS v1.3 on the website.
• FFix the vulnerability using a virtual patch at the WAF.

• A
  2% (1)
• B
  7% (3)
• C
  14% (6)
• D
  72% (31)
• E
  5% (2)

Explanation

The best recommendations to prevent an XSS vulnerability from being exploited are to implement a compensating control in the source code and to fix the vulnerability using a virtual patch at the WAF. A compensating control is a technique that mitigates the risk of a vulnerability by adding additional security measures, such as input validation, output encoding, or HTML sanitization. A virtual patch is a rule that blocks or modifies malicious requests or responses at the WAF level, without modifying the application code. These recommendations are effective, efficient, and less disruptive than the other options.

No community discussion yet for this question.