Exam 1z0-997-20 topic 1 question 5 discussion

Actual exam question from Oracle's 1z0-997-20

Question #: 5
Topic #: 1

A new international hacktivist group, based in London, launched wide scale cyber attacks including SQL Injection and Cross-Site Scripting (XSS) across multiple websites which are hosted in Oracle Cloud Infrastructure (OCI). As an IT consultant, you must configure a Web Application Firewall (WAF) to protect these websites against the attacks.
How should you configure your WAF to protect the website against those attacks? (Choose the best answer.)

A. Enable a Protection Rule to block the attacks based on HTTP Headers that contain XSS and SQL strings.
B. Enable an Access Rule to block the IP Address range from London.
C. Enable a Protection Rule to block requests XSS Filters Categories and SQL Filters Categories.
D. Enable a Protection Rule to block requests that came from London.
E. Enable an Access Rule that contains XSS Filters Categories and SQL Filters Categories.

Show Suggested Answer

Suggested Answer: C 🗳️
Reference:
https://docs.cloud.oracle.com/en-us/iaas/Content/WAF/Reference/protectionruleids.htm

by Osong at Nov. 13, 2020, 6:30 p.m.

Comments

Submit Cancel

ankit89

Highly Voted 4 years, 5 months ago

C is correct, https://www.ateam-oracle.com/using-oci-waf-web-application-firewall-with-oracle-e-business-suite#:~:text=The%20protection%20rules%20can%20be,achieved%20by%20enabling%20corresponding%20rules.

upvoted 5 times

...