CompTIA Security+ (SY0-601) — Question 775

A cybersecurity administrator needs to implement a Layer 7 security control on a network and block potential attacks. Which of the following can block an attack at
Layer 7? (Choose two.)

Answer options

• A. HIDS
• B. NIPS
• C. HSM
• D. WAF
• E. NAC
• F. NIDS

Correct answer: B, D

Explanation

The correct answers are B (NIPS) and D (WAF) because they are designed to inspect and filter traffic at the application layer, effectively blocking attacks. HIDS (A) and NIDS (F) operate at different layers and focus more on host and network intrusion detection, while HSM (C) and NAC (E) serve different purposes such as key management and access control, respectively.