The DevSecOps team is remediating an SSRF issue on the company's public-facing website. Which of the following is the best mitigation technique to address this issue?

The correct answer is A. Place a WAF in front of the web server.. A Web Application Firewall (WAF) is the best mitigation for Server-Side Request Forgery (SSRF) because it can inspect, filter, and block malicious requests attempting to exploit SSRF vulnerabilities before they reach the web server.

Submitted by carlos_mx· Mar 6, 2026Vulnerability Management

Question

Options

APlace a WAF in front of the web server.
BInstall a CASB in front of the web server
CPut a forward proxy in front of the web server.
DImplement MFA in front of the web server

How the community answered

(48 responses)

A
92% (44)
B
4% (2)
C
2% (1)
D
2% (1)

Explanation

A Web Application Firewall (WAF) is the best mitigation for Server-Side Request Forgery (SSRF) because it can inspect, filter, and block malicious requests attempting to exploit SSRF vulnerabilities before they reach the web server.

Topics

#SSRF#WAF#web application security#vulnerability mitigation

Community Discussion

No community discussion yet for this question.

Full CS0-003 Practice