An organization has deployed a web application on Azure using Kubernetes.
Nopal Securities technical mcq question, verified with a worked answer. Free to practise - no sign-up.
An organization has deployed a web application on Azure using Kubernetes. A scan reveals outdated vulnerable containers. Patching requires downtime. What is the most appropriate immediate course of action?
Show answer & explanation
Answer: A. Implement a Web Application Firewall (WAF) rule to block known exploits temporarily
Virtual patching via WAF rules blocks malicious request signatures targeting the vulnerability while application patching is scheduled.
Step-by-step Derivation:
Step 1: Immediate patching requires downtime which is unacceptable during production hours.
Step 2: A WAF rule inspects incoming HTTP traffic and filters out known exploit payloads, providing compensating control.