ExamGecko
Question list
Search
Search

Question 429 - CISM discussion

Report
Export

Which of the following is the BEST way to contain an SQL injection attack that has been detected by a web application firewall?

A.
Force password changes on the SQL database.
Answers
A.
Force password changes on the SQL database.
B.
Reconfigure the web application firewall to block the attack.
Answers
B.
Reconfigure the web application firewall to block the attack.
C.
Update the detection patterns on the web application firewall.
Answers
C.
Update the detection patterns on the web application firewall.
D.
Block the IPs from where the attack originates.
Answers
D.
Block the IPs from where the attack originates.
Suggested answer: B

Explanation:

According to the CISM Review Manual, one of the best ways to contain an SQL injection attack that has been detected by a web application firewall is to reconfigure the web application firewall to block the attack. This means that the web application firewall should be updated with the latest detection patterns and rules that can identify and prevent SQL injection attacks.By doing so, the web application firewall can reduce the impact and damage of the attack, and prevent further exploitation of the vulnerable database1

The other options are not as effective as reconfiguring the web application firewall to block the attack. Force password changes on the SQL database is a reactive measure that does not address the root cause of the problem, and may cause data loss or corruption if not done properly. Updating the detection patterns on the web application firewall is a preventive measure that can help to detect SQL injection attacks, but it does not stop them from happening in the first place.Blocking IPs from where the attack originates is a defensive measure that can limit or stop some SQL injection attacks, but it does not protect all possible sources of malicious traffic, and may also affect legitimate users or applications1

Reference=1: CISM Review Manual, 16th Edition, ISACA, 2020, pp. 32-33...

asked 01/10/2024
louishn vn
33 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first