Local File Inclusion (LFI) and Remote File Inclusion (RFI) vulnerabilities are prevented by which measures?

• A. MFA
• B. Input sanitization and disabling URL includes
• C. Encryption
• D. Password rotation

Answer: (B)

Local File Inclusion and Remote File Inclusion vulnerabilities arise when user input controls which file is loaded, allowing attackers to access or execute files they shouldn’t. The most effective defense is validating and sanitizing that input and restricting how includes can be performed. Sanitizing input helps remove hazardous path components like ../ that attackers use to traverse directories, and disabling URL-based includes blocks attempts to pull in remote or user-supplied resources. Together, these controls ensure only legitimate, local files are considered for inclusion. Other options don’t address the inclusion path issue: authentication measures protect logins, encryption protects data, and password rotation doesn’t fix how files are chosen or loaded.