Question
While performing mandatory monthly patch updates on a production application server, the security analyst reports an instance of buffer overflow for a new application that was migrated to the cloud and is also publicly exposed. Security policy requires that only internal users have access to the application. Which of the following should the analyst implement to mitigate the issues reported? (Choose two.)
- A. Configure firewall rules to block all external traffic. Correct
- B. Enable input validation for all fields. Correct
- C. Enable automatic updates to be installed on all servers.
- D. Configure the security group to enable external traffic.
- E. Set up a DLP policy to alert for exfiltration on all application servers.
- F. Enable nightly vulnerability scans.
Explanation
The application must be reachable only by internal users, so firewall rules that block all external traffic remove the public exposure. The buffer overflow is fixed at its root by validating input length and format on every field so oversized input never reaches memory unchecked. Enabling external traffic in the security group does the opposite of the policy, while automatic updates, DLP alerts and nightly scans may detect or reduce risk but do not mitigate either reported issue directly.
