Câu 305: 312-50V13: Certified Ethical Hacker v13

The web application security team of a global firm detected a sophisticated injection attack that exploited a flaw in the application’s input validation. The attack was carried out using a custom script that used obfuscation and evasion techniques to bypass security measures. To counter such attacks in the future, the security team is considering implementing additional security measures. Which of the following would be the most effective?

1. A. Deploy a Web Application Firewall (WAF) with built-in evasion detection features. — đáp án hiện tại
2. B. Enforce Two-Factor Authentication (2FA) for all user-level application access.
3. C. Implement continuous security code review and penetration testing.
4. D. Configure Security Information and Event Management (SIEM) to monitor user activity in real time.