Exam CAS-005 topic 1 question 43 discussion

❌ Why the other options are not ideal: A. Shutting down the systems until the code is ready Not viable since the application is public-facing and in active use. B. Uninstalling the impacted runtime engine Would break the application and cause downtime, defeating the goal of maintaining service continuity. C. Selectively blocking traffic on the affected port May inadvertently block legitimate users or critical functionality, and doesn’t provide nuanced protection.

✅ D. Configuring IPS and WAF with signatures 🔍 Why this is the best option: The application must remain online during the transition to modern environments. The deprecated runtime engine presents a security risk, likely with known vulnerabilities. Deploying Intrusion Prevention Systems (IPS) and a Web Application Firewall (WAF) with custom or vendor-provided signatures can detect and block known attack patterns, SQL injection, RCE attempts, or other web-based exploits targeting the vulnerable engine — without taking the service offline.