CompTIA Exam CS0-003 Topic 5 Question 11 Discussion

Actual exam question for CompTIA's CS0-003 exam

Question #: 11
Topic #: 5

A security analyst is reviewing the logs of a web server and notices that an attacker has attempted to exploit a SQL injection vulnerability. Which of the following tools can the analyst use to analyze the attack and prevent future attacks?

AA web application firewall

BA network intrusion detection system

CA vulnerability scanner

DA web proxy

Show Suggested Answer

Suggested Answer: A

A web application firewall (WAF) is a tool that can protect web servers from attacks such as SQL injection, cross-site scripting, and other web-based threats. A WAF can filter, monitor, and block malicious HTTP traffic before it reaches the web server. A WAF can also be configured with rules and policies to detect and prevent specific types of attacks.

: CompTIA CySA+ Study Guide: Exam CS0-002, 2nd Edition : CompTIA CySA+ Certification Exam Objectives Version 4.0.pdf)

by Tyra at Dec 23, 2023, 01:29 AM

Limited Time Offer

25%

Off

Get Premium CS0-003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Madonna

13 days ago

Hmm, I don't know. A web proxy could also be a good option. It can inspect the traffic, detect any suspicious activity, and even rewrite the requests to block the injection attempts. Just gotta make sure it's configured properly.

upvoted 0 times

...

Carlee

14 days ago

Ah, but don't forget the good old vulnerability scanner. That can help us identify any weaknesses in the web app that might be leaving the door open for SQL injection in the first place. Gotta address the root cause, you know?

upvoted 0 times

...

Leota

15 days ago

I dunno, a web app firewall might be overkill. What about a network IDS? It can monitor the traffic and catch those SQL injection attempts in the act, right? Plus, it's a bit more versatile than just a firewall.

upvoted 0 times

...

Shawnda

16 days ago

Whoa, a SQL injection attack? That's some serious stuff, man. We definitely need to bring out the big guns for this one - a web application firewall is the way to go. It can detect and block those sneaky SQL injection attempts before they even get close to the server.

upvoted 0 times

Roosevelt

B: I agree, a web application firewall can block those attacks before they cause any damage.

upvoted 0 times

...

Valentin

23 hours ago

A: A web application firewall is our best bet to stop those SQL injection attacks.

upvoted 0 times

...