Exam SY0-601 topic 1 question 591 discussion

*On Exam, Taken On July 31, 2023*

Implementing input validation is the best remediation to prevent code injection vulnerabilities. Input validation involves validating and sanitizing user inputs before processing them within the application. By doing so, the application can detect and prevent malicious inputs, such as SQL injection or other code injection attempts. Input validation helps ensure that data entered into web forms or other application inputs meets the expected format and criteria, thus mitigating the risk of code injection attacks. It is a fundamental security practice to protect against various types of injection attacks.

Utilizing a WAF is a valuable security measure for protecting against a variety of web application attacks, but it is not a replacement for proper input validation. Input validation should still be implemented to secure the application at its core.

thanks applebeeswaiter1122 for all your help. what % of the exam do you think was on here overall if you had to guess. you're awesome

Going with A here. WAF will prevent attacks not vulnerability

the question is asking the remediation to prevent the vulnerability, shouldn't it be A-Implement input validations? I'd choose WAF if it's asking how to prevent the attack.

C is better than A I choose C

C. Utilize a WAF A web application firewall (WAF) is designed to filter and monitor HTTP traffic between a web application and the Internet. It can help protect against common web application vulnerabilities, including code injection. By implementing a WAF, it can analyze the incoming requests and block or mitigate any attempts at code injection. While implementing input validations (A) is a good practice, it may not be sufficient to prevent code injection entirely. Additional layers of security, such as a WAF, are recommended. Deploying multifactor authentication (MFA) (B) is not directly related to preventing code injection. MFA is used for user authentication, adding an extra layer of security to verify identities. Configuring HIPS (D), or Host Intrusion Prevention System, may provide some additional security measures, but it is not specifically designed to prevent code injection. HIPS focuses on detecting and blocking attacks or unauthorized activities on a specific host system.