How would you protect from these attacks?

Take a look at the following attack on a Web Server using obstructed URL:

How would you protect from these attacks?
A . Configure the Web Server to deny requests involving "hex encoded" characters
B . Create rules in IDS to alert on strange Unicode requests
C . Use SSL authentication on Web Servers
D . Enable Active Scripts Detection at the firewall and routers

Answer: B