How would you protect from these attacks?

Take a look at the following attack on a Web Server using obstructed URL:

How would you protect from these attacks?

A.
Configure the Web Server to deny requests involving “hex encoded” characters

B.
Create rules in IDS to alert on strange Unicode requests

C.
Use SSL authentication on Web Servers

D.
Enable Active Scripts Detection at the firewall and routers