Objective 1.03 Determine Which ASM Mitigation Is Appropriate for a Particular Vulnerability 303 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company's web application has a file upload feature that is vulnerable to command injection. The security team wants to mitigate this vulnerability, but they are concerned about blocking legitimate file uploads that may contain special characters. Which ASM mitigation should be configured?

   • AEnable bot defense to block automated command injection tools.
   • BEnable the XSS signature set in blocking mode.
   • CPlace the upload URL in learning mode.
   • DEnable the command injection signature set in blocking mode.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company's web application has a file upload feature that is vulnerable to path traversal attacks, allowing attackers to upload files to unintended directories. The security team needs an ASM mitigation that prevents this specific attack. Which ASM mitigation should be configured?

   • APlace the upload URL in learning mode.
   • BEnable the web scraping protection feature.
   • CEnable the path traversal signature set in blocking mode.
   • DEnable the command injection signature set in blocking mode.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company's web application has a search feature that is vulnerable to both reflected XSS and SQL injection. The security team wants to mitigate both vulnerabilities, but they are concerned about the performance impact of enabling multiple signature sets. They also need to minimize false positives. Which approach should the security team take?

   • AEnable the XSS signature set in blocking mode and the SQL injection signature set in alarm mode.
   • BPlace the policy in learning mode to observe traffic before enabling any signatures.
   • CEnable only the SQL injection signature set in blocking mode because it is more critical.
   • DEnable both the XSS and SQL injection signature sets in blocking mode, and monitor for false positives.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A financial services company has a public-facing login portal. A vulnerability assessment identifies that the portal is susceptible to credential stuffing attacks, where attackers use lists of stolen usernames and passwords. The security team needs to reduce the success rate of these attacks without blocking legitimate users who may have mistyped their password a few times. Which ASM mitigation should be implemented?

   • AConfigure a brute force protection policy to block after 3 failed attempts.
   • BPlace the login URL in learning mode.
   • CEnable bot defense with a challenge for suspicious login attempts.
   • DEnable the SQL injection signature set in blocking mode.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company's web application has a search feature that reflects user input in the response without proper encoding. A vulnerability scan identifies this as a reflected XSS vulnerability. The development team is working on a fix, but the security team needs an immediate ASM mitigation to protect users. Which ASM mitigation should be configured?

   • AConfigure a file type signature to block script uploads.
   • BEnable bot defense to block automated XSS scanners.
   • CEnable the XSS signature set in blocking mode.
   • DPlace the search URL in learning mode.
   Reveal Solution Discussion Select an answer first