Discuss CompTIA CV0-004 Exam Topic 1 Question 49

A customer relationship management application, which is hosted in a public cloud laaS network, is vulnerable to a remote command execution vulnerability. Which of the following is

the best solution for the security engineer to implement to prevent the application from being exploited by basic attacks?

AIPS

BACL

CDLP

DWAF

Suggested Answer: D

A Web Application Firewall (WAF) is the best solution to implement for a public cloud IaaS hosted customer relationship management application vulnerable to remote command execution attacks. WAFs are designed to monitor, filter, and block malicious HTTP/S traffic to and from a web application to protect against various application layer attacks, including remote command execution. References: CompTIA Cloud+ Study Guide (Exam CV0-004) - Chapter on Security in the Cloud

Get Premium CV0-004 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

17 comments · newest first

Lachelle 23 days ago

Exactly! WAF is the way to go for protecting against those vulnerabilities.

Sanjuana 28 days ago

DLP is not relevant here. It’s more about data loss prevention.

Amie 1 month ago

Right, ACLs just control access. They won’t stop command execution directly.

Hollis 1 month ago

I feel like ACL is too basic for this scenario. We need something more robust.

Erasmo 1 month ago

True, but WAF is more tailored for web applications. It’s a solid defense.

Kasandra 2 months ago

A) IPS could work too, but it might not be enough for web-specific threats.

Juliann 2 months ago

I agree, WAF is crucial for web apps. It prevents attacks like SQL injection.

Jennifer 2 months ago

I think D) WAF is the best choice. It can filter and monitor HTTP traffic.

Katie 2 months ago

Definitely surprised that DLP isn't even an option here!

Lai 2 months ago

Really? A WAF for remote command execution? Sounds too simple.

Skye 2 months ago

ACLs can help too, but not as much as WAF.

Kate 3 months ago

I think IPS would be more effective.

Amalia 3 months ago

WAF is the best choice here.

Eura 3 months ago

I lean towards WAF as the best option since it specifically targets web application attacks, but I need to double-check my notes on that.

Kenny 3 months ago

ACLs seem like they could limit access, but I doubt they would directly prevent exploitation of that vulnerability.

Idella 3 months ago

I practiced a similar question where an IPS was the answer, but I feel like that might not be enough for remote command execution.

Vallie 4 months ago

I think I remember that a WAF could help filter out malicious requests, but I'm not entirely sure if it's the best choice here.

CompTIA CV0-004 Exam - Topic 1 Question 49 Discussion