Exam CAS-004 topic 1 question 527 discussion

This is the way

A. Configure firewall rules to block all external traffic. Since the security policy mandates that only internal users should have access to the application, configuring firewall rules to block all external (public) traffic ensures that unauthorized external entities cannot access the application. This is a direct and immediate way to enforce the access policy, reducing the attack surface by limiting exposure to only trusted internal networks. B. Enable input validation for all fields. Buffer overflows often exploit insufficient input validation, allowing attackers to send malicious input that can overwrite memory. By enforcing strict input validation, the application can ensure that only properly formatted and expected data is processed, thereby preventing buffer overflow attacks.

Ans AB. A. Configure firewall rules to block all external traffic. B. Enable input validation for all fields. Configuring firewall rules will prevent external access to the application and enabling input validation helps protect against buffer overflow vulnerabilities by ensuring that only properly formatted data is accepted.