AWS Network Firewall and WAF Quiz

What you'll be asked

1. Which AWS service is primarily used to protect your web applications from common web exploits like SQL injection and cross-site scripting (XSS)?
2. You need to inspect traffic between your VPCs and the internet, as well as traffic between subnets, using granular stateful rules. Which service should you deploy?
3. An application is receiving a high volume of malicious requests from specific IP addresses. What is the most efficient way to block these requests using AWS WAF?
4. When configuring AWS Network Firewall, what is the primary purpose of a 'Stateless' rule group?
5. You have a web application behind an Application Load Balancer (ALB). You notice that your WAF rules are not triggering for traffic. You have verified the WAF is associated with the ALB. What is a common troubleshooting step to determine if the requests are reaching the WAF?

Answers and explanations come after you submit.