mediumMultiple SelectObjective-mapped
CAS-004 Practice Question: Is reviewing the configuration of a web…
A security engineer is reviewing the configuration of a web application firewall (WAF) that protects a critical e-commerce site. Which TWO settings should be enabled to defend against SQL injection attacks? (Select TWO.)
⚠ Common exam trap
Test-takers frequently confuse rate limiting or IP reputation as general security measures that would stop SQL injection, but these controls address different attack vectors (DoS and network-layer filtering) and do not inspect the content of requests for malicious SQL syntax.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable SQL injection signature rules.
Enabling SQL injection signature rules allows the WAF to inspect HTTP requests for known SQL injection patterns, such as UNION, OR 1=1, or comment sequences like '--', using a predefined rule set. Option B is correct because input validation for all query parameters ensures that user-supplied data is sanitized or rejected before reaching the application, preventing malicious SQL syntax from being interpreted by the database. Together, these controls provide both signature-based detection and behavioral prevention against SQL injection attacks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Enable SQL injection signature rules.
Why this is correct
Signature rules detect known SQL injection patterns.
- ✓
Enable input validation for all query parameters.
Why this is correct
Validating input helps prevent malicious SQL syntax from being processed.
- ✗
Enable rate limiting on login endpoints.
Why it's wrong here
Rate limiting prevents brute force, not SQL injection.
- ✗
Enable IP reputation blocking.
Why it's wrong here
IP reputation blocks known malicious IPs, not SQL injection payloads.
- ✗
Enable SSL/TLS inspection for all traffic.
Why it's wrong here
SSL inspection decrypts traffic but does not prevent SQL injection.
Visual reference
Go deeper
Related to this question
About these practice questions
One of 968 original CAS-005 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CAS-005 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CAS-005 exam.