Isaca Exam Cybersecurity-Audit-Certificate Topic 3 Question 25 Discussion

Actual exam question for Isaca's Cybersecurity-Audit-Certificate exam

Question #: 25
Topic #: 3

[All Cybersecurity-Audit-Certificate Questions]

Which type of firewall blocks many types of attacks, such as cross-site scripting (XSS) and structured query language (SQL) injection?

AIntrusion detection

BStateful inspection

CHost-based

DWeb application

Show Suggested Answer

Suggested Answer: D

A web application firewall (WAF) is specifically designed to monitor, filter, and block HTTP traffic to and from a web application. It is different from other types of firewalls because it can filter the content of specific web applications. By inspecting HTTP traffic, a WAF can prevent attacks stemming from web application security flaws, such as SQL injection and cross-site scripting (XSS), file inclusion, and security misconfigurations.

by Deeanna at Sep 06, 2024, 07:44 PM

Limited Time Offer

25%

Off

Get Premium Cybersecurity-Audit-Certificate Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kayleigh

3 months ago

D) Web application firewall, all the way. Gotta protect that website from the dark side of the internet, you know?

upvoted 0 times

...

Jutta

3 months ago

Hmm, I'd say D) Web application firewall. Sounds like the most comprehensive option to tackle those security threats.

upvoted 0 times

Annett

2 months ago

True, but A) Intrusion detection can also help detect and prevent those attacks before they reach the web application.

upvoted 0 times

...

Chi

2 months ago

I agree, but I believe D) Web application firewall is specifically designed to protect web applications from those threats.

upvoted 0 times

...

Tomas

2 months ago

I think B) Stateful inspection is also a good choice for blocking those types of attacks.

upvoted 0 times

...

Glendora

3 months ago

I'm leaning towards D) Web application firewall. Heard those things are like bouncers for your website, keeping the bad guys out.

upvoted 0 times

Iraida

2 months ago

Yeah, Web application firewalls are like the bouncers of the internet, keeping out the bad guys trying to attack your site.

upvoted 0 times

...

Lewis

3 months ago

I've heard that Web application firewalls are like having a security guard specifically for your website, blocking malicious traffic.

upvoted 0 times

...

Santos

3 months ago

I think you're right, D) Web application firewall is designed to protect web applications from a variety of attacks.

upvoted 0 times

...

Caitlin

3 months ago

I believe Stateful inspection is the best choice because it monitors the state of active connections and can block malicious traffic.

upvoted 0 times

...

Niesha

3 months ago

I'm not sure, but I think D) Web application could also be a good option.

upvoted 0 times

...

Alesia

4 months ago

I agree with Coletta, Stateful inspection sounds like the right choice.

upvoted 0 times

...

Marti

4 months ago

D) Web application firewall definitely seems like the way to go here. Gotta keep those pesky hackers and their XSS and SQL injection attacks at bay!

upvoted 0 times

Alease

3 months ago

D) Web application firewall definitely seems like the way to go here. Gotta keep those pesky hackers and their XSS and SQL injection attacks at bay!

upvoted 0 times

...

Jaclyn

3 months ago

C) Host-based

upvoted 0 times

...

Werner

3 months ago

B) Stateful inspection

upvoted 0 times

...

Merlyn

3 months ago

A) Intrusion detection

upvoted 0 times

...

Coletta

4 months ago

I think the answer is B) Stateful inspection.

upvoted 0 times

...