Question
A customer relationship management application, which is hosted in a public cloud IaaS network, is vulnerable to a remote command execution vulnerability. Which of the following is the best solution for the security engineer to implement to prevent the application from being exploited by basic attacks?
- A. IPS
- B. ACL
- C. DLP
- D. WAF Correct
Explanation
A web application firewall inspects HTTP(S) requests at layer 7 and blocks common exploit patterns such as command and SQL injection before they reach the application, which suits a web-based CRM in the cloud. An ACL filters by address and port and cannot see malicious payloads in allowed web traffic. DLP prevents data leaving the organization, and a network IPS is less tailored to application-layer web attacks than a WAF.
