please answer both questions

please answer both questions

An e-commerce organization discovers that its web server was subjected to a man-in-the-middle attack Confidential communications between the web server and end user compromised Which solution should be implemented to protect against this type of attack? Use complex passwords Use a firewall and an IDS/IPS Use public key cryptography Use multifactor authentication An organization suffers a data breach via an SQL injection attack on a web application Which control prevents this type of attack? Internet secunty protocol Input validation Network segmentation Security awareness training