An organization purchased a critical business application containing sensitive data. The organization would like to ensure that the application is not exploited by common data exfiltration attacks…

Question

Options

• AURL scanning
• BWAF
• CReverse proxy
• DNAC

• A
  13% (2)
• B
  80% (12)
• C
  7% (1)

Explanation

A Web Application Firewall (WAF) sits directly in front of a web application and inspects HTTP/HTTPS traffic for malicious patterns - including SQL injection, XSS, and other techniques commonly used to exfiltrate sensitive data - making it the most targeted defense for this scenario.

• A (URL scanning) analyzes URLs for known malicious links or phishing content, but doesn't inspect application-layer traffic patterns used in data exfiltration.
• C (Reverse proxy) forwards client requests to backend servers and can provide some filtering, but lacks the specialized rule sets and deep inspection capabilities of a WAF designed specifically for application-layer attacks.
• D (NAC - Network Access Control) governs who can connect to the network based on device posture and identity, but doesn't inspect or filter the content of application traffic once a user is authenticated.

Memory tip: Think "WAF = Web App Firewall = watches what happens inside the app." If the question involves a web/business application and mentions attacks on data (SQLi, XSS, exfiltration), WAF is almost always the answer - it's the only control operating at Layer 7 with application-aware rules.

No community discussion yet for this question.