問題文
An analyst is asked to explain why a company runs inspection at the network edge, on each laptop, and in front of a public web application, instead of picking only one of the three. Which statement best describes what the application security system contributes that the other two do not?
選択肢
- It replaces the need for the other two once it is deployed.
- It can act on a malformed query string that the other two see only as allowed traffic on a permitted port, because it understands the structure of the requests that reach one application.
- It sees the process that created each request on the client, which lets it block the request before it is sent to any of the other layers.
- It is the only one of the three that can record the source address of a request for later investigation.