PCCSE · Question #186
Which three OWASP protections are part of Prisma Cloud Web-Application and API Security (WAAS) rule? (Choose three.)
The correct answer is B. Local file inclusion C. SQL injection E. Shellshock. Prisma Cloud WAAS includes protections aligned with OWASP Top 10 threats. Local File Inclusion (B) protects against attackers reading sensitive server-side files by manipulating file path inputs. SQL Injection (C) is one of the most well-known OWASP vulnerabilities, where…
Question
Which three OWASP protections are part of Prisma Cloud Web-Application and API Security (WAAS) rule? (Choose three.)
Options
- ADoS Protection
- BLocal file inclusion
- CSQL injection
- DSuspicious binary
- EShellshock
How the community answered
(37 responses)- A3% (1)
- B95% (35)
- D3% (1)
Explanation
Prisma Cloud WAAS includes protections aligned with OWASP Top 10 threats. Local File Inclusion (B) protects against attackers reading sensitive server-side files by manipulating file path inputs. SQL Injection (C) is one of the most well-known OWASP vulnerabilities, where malicious SQL is injected into queries. Shellshock (E) is a vulnerability in the Bash shell that allows remote code execution via environment variables, and WAAS includes a specific protection for it. DoS Protection (A) is available in WAAS but is a rate-limiting/availability feature rather than an OWASP application vulnerability category. Suspicious Binary (D) is a Prisma Cloud runtime defense feature, not a WAAS/OWASP web application protection.
Topics
Community Discussion
No community discussion yet for this question.