Exam SY0-701 topic 1 question 311 discussion

Actual exam question from CompTIA's SY0-701

Question #: 311
Topic #: 1

An organization recently started hosting a new service that customers access through a web portal. A security engineer needs to add to the existing security devices a new solution to protect this new service. Which of the following is the engineer most likely to deploy?

A. Layer 4 firewall
B. NGFW
C. WAF
D. UTM

Show Suggested Answer

Suggested Answer: C 🗳️

by Cee007 at Sept. 5, 2024, 6:02 p.m.

Comments

Submit Cancel

cri88

Highly Voted 9 months, 2 weeks ago

Selected Answer: C

C. WAF (Web Application Firewall) A Web Application Firewall (WAF) is specifically designed to protect web applications by filtering, monitoring, and blocking HTTP/S traffic to and from a web service. Since the organization is hosting a new service through a web portal, a WAF would be the most appropriate solution to protect against common web-based attacks like SQL injection, cross-site scripting (XSS), and other OWASP Top 10 threats. Layer 4 firewall (A) provides protection at the transport layer, which is too low-level to specifically protect web applications. NGFW (Next-Generation Firewall) (B) adds application-level filtering and protection, but is generally broader in scope, not specifically tailored to web applications. UTM (Unified Threat Management) (D) is a multi-functional security device but doesn't provide the specialized web application protection that a WAF offers. Thus, WAF is the most suitable solution for protecting a web service accessed via a portal.

upvoted 6 times

...

FrozenCarrot

Most Recent 9 months, 2 weeks ago

Portal -> WAF

upvoted 2 times

...

Cee007

9 months, 3 weeks ago

Selected Answer: C

C. WAF (Web Application Firewall) A WAF is specifically designed to protect web applications by filtering and monitoring HTTP traffic between a web application and the internet. It can help prevent attacks such as SQL injection, cross-site scripting (XSS), and other web-based threats that could target the new service accessed through the web portal.

upvoted 1 times

...