Câu 151: CAS-004: CompTIA Advanced Security Practitioner (CASP+) CAS-004

A security engineer is reviewing a record of events after a recent data breach incident that involved the following: ✑ A hacker conducted reconnaissance and developed a footprint of the company's Internet-facing web application assets. ✑ A vulnerability in a third-party library was exploited by the hacker, resulting in the compromise of a local account. ✑ The hacker took advantage of the account's excessive privileges to access a data store and exfiltrate the data without detection. Which of the following is the BEST solution to help prevent this type of attack from being successful in the future?

1. A. Dynamic analysis
2. B. Secure web gateway
3. C. Software composition analysis — đáp án hiện tại
4. D. User behavior analysis
5. E. Web application firewall