The DevSecOps team is remediating a Server-Side Request Forgery (SSRF) issue on the company's public-facing website. Which of the following is the best mitigation technique to address this issue?

The correct answer is A. Place a Web Application Firewall (WAF) in front of the web server. Server-Side Request Forgery (SSRF) occurs when an attacker manipulates a web server to make unauthorized internal or external requests, often to access internal resources or exfiltrate data. A Web Application Firewall (WAF) is the best mitigation because it: Filters and blocks…

Submitted by chen.hong· Mar 6, 2026Vulnerability Management

Question

Options

APlace a Web Application Firewall (WAF) in front of the web server.
BInstall a Cloud Access Security Broker (CASB) in front of the web server.
CPut a forward proxy in front of the web server.
DImplement MFA in front of the web server.

How the community answered

(36 responses)

A
78% (28)
B
6% (2)
C
3% (1)
D
14% (5)

Explanation

Server-Side Request Forgery (SSRF) occurs when an attacker manipulates a web server to make unauthorized internal or external requests, often to access internal resources or exfiltrate data. A Web Application Firewall (WAF) is the best mitigation because it: Filters and blocks malicious requests before they reach the server. Prevents attackers from sending unauthorized requests to internal services. Can detect and block SSRF patterns in incoming traffic.

Topics

#SSRF#WAF#Web application security#Vulnerability mitigation

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice