Which technology provides runtime protection and detects runtime attacks?

Which technology provides runtime protection and detects runtime attacks?

• A. BeEF
• B. Security misconfiguration
• C. URL whitelisting
• D. Runtime Application Self Protection

Answer: (D)

Runtime protection that detects runtime attacks is provided by Runtime Application Self-Protection. RASP sits inside the application or its runtime, instrumenting the code and monitoring data as it flows through the program. Because it operates with full awareness of the app’s context, it can enforce security rules in real time, reject malicious inputs, and halt or sandbox suspicious processes as soon as an attack is attempted. This in-process visibility enables protection against common runtime attacks like SQL injection, deserialization, or code execution by validating inputs, watching for dangerous data flows, and blocking dangerous behavior before it can cause harm. BeEF is a browser-based exploitation framework and isn’t a runtime defense. Security misconfiguration refers to vulnerabilities arising from improper setup, not a protective technology. URL whitelisting controls which destinations are allowed, but on its own it doesn’t provide real-time detection and response to runtime attacks inside the application.

Runtime protection that detects runtime attacks is provided by Runtime Application Self-Protection. RASP sits inside the application or its runtime, instrumenting the code and monitoring data as it flows through the program. Because it operates with full awareness of the app’s context, it can enforce security rules in real time, reject malicious inputs, and halt or sandbox suspicious processes as soon as an attack is attempted. This in-process visibility enables protection against common runtime attacks like SQL injection, deserialization, or code execution by validating inputs, watching for dangerous data flows, and blocking dangerous behavior before it can cause harm.

BeEF is a browser-based exploitation framework and isn’t a runtime defense. Security misconfiguration refers to vulnerabilities arising from improper setup, not a protective technology. URL whitelisting controls which destinations are allowed, but on its own it doesn’t provide real-time detection and response to runtime attacks inside the application.