nerdexam
CompTIA

CS0-003 · Question #493

After a recent vulnerability report for a server is presented, a business must decide whether to secure the company's web-based storefront or shut it down. The developer is not able to fix the…

The correct answer is D. Put a WAF in front of the storefront. A WAF enforces input validation rules, which prevent attackers from sending malicious payloads to the application: Filters or sanitizes requests for SQL, XSS, and other injection attempts. Blocks unauthorized file uploads or parameter tampering.

Submitted by anna_se· Mar 6, 2026Vulnerability Management

Question

After a recent vulnerability report for a server is presented, a business must decide whether to secure the company's web-based storefront or shut it down. The developer is not able to fix the zero-day vulnerability because a patch does not exist yet. Which of the following is the best option for the business?

Options

  • ALimit the API request for new transactions until a patch exists.
  • BTake the storefront offline until a patch exists.
  • CIdentify the degrading functionality.
  • DPut a WAF in front of the storefront.

How the community answered

(49 responses)
  • A
    6% (3)
  • B
    4% (2)
  • C
    12% (6)
  • D
    78% (38)

Explanation

A WAF enforces input validation rules, which prevent attackers from sending malicious payloads to the application: Filters or sanitizes requests for SQL, XSS, and other injection attempts. Blocks unauthorized file uploads or parameter tampering.

Topics

#zero-day#WAF#vulnerability mitigation#web security

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice