CS0-003 · Question #493
After a recent vulnerability report for a server is presented, a business must decide whether to secure the company's web-based storefront or shut it down. The developer is not able to fix the…
The correct answer is D. Put a WAF in front of the storefront. A WAF enforces input validation rules, which prevent attackers from sending malicious payloads to the application: Filters or sanitizes requests for SQL, XSS, and other injection attempts. Blocks unauthorized file uploads or parameter tampering.
Question
After a recent vulnerability report for a server is presented, a business must decide whether to secure the company's web-based storefront or shut it down. The developer is not able to fix the zero-day vulnerability because a patch does not exist yet. Which of the following is the best option for the business?
Options
- ALimit the API request for new transactions until a patch exists.
- BTake the storefront offline until a patch exists.
- CIdentify the degrading functionality.
- DPut a WAF in front of the storefront.
How the community answered
(49 responses)- A6% (3)
- B4% (2)
- C12% (6)
- D78% (38)
Explanation
A WAF enforces input validation rules, which prevent attackers from sending malicious payloads to the application: Filters or sanitizes requests for SQL, XSS, and other injection attempts. Blocks unauthorized file uploads or parameter tampering.
Topics
Community Discussion
No community discussion yet for this question.