Question
An organization’s internet-facing website was compromised when an attacker exploited a buffer overflow. Which of the following should the organization deploy to best protect against similar attacks in the future?
- A. NGFW
- B. WAF Correct
- C. TLS
- D. SD-WAN
Explanation
A web application firewall inspects HTTP and HTTPS traffic to a web application and blocks exploit attempts aimed at the application, such as malformed or oversized input used to trigger a buffer overflow. An NGFW focuses on network and application identification across all traffic and is less specialized for web application exploits. TLS encrypts traffic but does nothing to stop malicious input, and SD-WAN manages WAN connectivity.
