AWS WAF Rules and Managed Rules Quiz

What you'll be asked

1. Which AWS WAF component is used to define the specific criteria, such as IP addresses or HTTP headers, that determine whether a request is allowed or blocked?
2. You want to protect your application against common vulnerabilities like SQL injection and cross-site scripting (XSS) without manually writing the regex patterns yourself. What is the most efficient way to achieve this?
3. What happens if a request matches multiple rules within a Web ACL that have different actions (e.g., one rule blocks and another allows)?
4. You are troubleshooting a production issue where legitimate traffic is being blocked by a Managed Rule. What is the recommended best practice to verify which rule is causing the block without fully disabling the managed rule group?
5. You have a Web ACL with a custom rule group that performs payload inspection. You notice that requests are being blocked even though they don't match the specific conditions of your custom rule. What is the most likely cause?

Answers and explanations come after you submit.