Question

An organization is struggling to differentiate threats from normal traffic and access to systems. A security engineer has been asked to recommend a system that will aggregate data and provide metrics that will assist in identifying malicious actors or other anomalous activity throughout the environment. Which of the following solutions should the engineer recommend? Web application firewall SIEM IPS UTM File integrity monitor

Answer 1

Answer:

Web application Firewall (WAF)

Explanation:

The Web application Firewall (WAF) will be recommended. This will enormously help any organisation that is having a struggle of differentiating threats from normal traffic and access to systems.

WAF is also going to It aggregate data and provide metrics that will assist in identifying malicious actors. Another vital function of WAF will be to block unwanted web traffic from accessing your site. It will protect against hacks, brute force attacks, DDoS attacks, cross-site scripting, SQL injection, and zero-day exploits.