Mitigation techniques · Question 12 of 12
A company runs a public web application and sees many attacks such as SQL injection in the log. Which measures make sense?
2 answers are correct. Hard
Show answer
Answer
- A Fix the root causes in the code with parameterized queries
- C Deploy a WAF in front of the application
Explanation
A WAF filters known attack patterns at layer 7 and buys time. In the long run, the vulnerability in the code must be fixed. Pure port filtering does not recognize content, and closing the port makes the application unusable.