Certified SOC Analyst (CSA) — Question 91

Which of the following tool can be used to filter web requests associated with the SQL Injection attack?

Answer options

• A. Nmap
• B. UrlScan
• C. ZAP proxy
• D. Hydra

Correct answer: B

Explanation

UrlScan is specifically designed to filter and monitor web requests to protect against various web-based attacks, including SQL Injection. In contrast, Nmap is primarily a network scanning tool, ZAP proxy is more of a web application security scanner, and Hydra is a password-cracking tool, making them unsuitable for this specific purpose.