Câu 12: CV0-004: CompTIA Cloud+

A cross-site request forgery vulnerability exploited a web application that was hosted in a public IaaS network. A security engineer determined that deploying a WAF in blocking mode at a CDN would prevent the application from being exploited again. However, a week after implementing the WAF, the application was exploited again. Which of the following should the security engineer do to make the WAF control effective?

1. A. Configure the DDoS protection on the CDN.
2. B. Install endpoint protection software on the VMs.
3. C. Add an ACL to the VM subnet. — đáp án hiện tại
4. D. Deploy an IDS on the IaaS network.