Exam CS0-003 topic 1 question 304 discussion

Actual exam question from CompTIA's CS0-003

Question #: 304
Topic #: 1

After a recent vulnerability report for a server is presented, a business must decide whether to secure the company’s web-based storefront or shut it down. The developer is not able to fix the zero-day vulnerability because a patch does not exist yet. Which of the following is the best option for the business?

A. Limit the API request for new transactions until a patch exists.
B. Take the storefront offline until a patch exists.
C. Identify the degrading functionality.
D. Put a WAF in front of the storefront.

Show Suggested Answer

Suggested Answer: D 🗳️

by mikeyou2017 at Nov. 21, 2024, 3:25 a.m.

Comments

Submit Cancel

mikeyou2017

Highly Voted 7 months, 1 week ago

put WAF (web application firewall)a security tool that protects web applications by monitoring and filtering traffic from the internet

upvoted 9 times

JacksonTrite

7 months ago

A WAF enforces input validation rules, which prevent attackers from sending malicious payloads to the application: Filters or sanitizes requests for SQL, XSS, and other injection attempts. Blocks unauthorized file uploads or parameter tampering.

upvoted 5 times

...

Susan4041

Most Recent 2 months, 2 weeks ago

Selected Answer: D

Put a WAF

upvoted 2 times

...