Implementing Web Application Firewall

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Security for Public Access

What you'll be asked

  1. Which of the following best describes the primary purpose of a Web Application Firewall (WAF)?
  2. When configuring a WAF in 'Detection Only' (or 'Log Only') mode, what is the expected behavior?
  3. You notice legitimate user traffic is being blocked by a WAF rule. What is the most effective approach to resolve this while maintaining security?
  4. Which attack type is a WAF most effective at mitigating compared to a standard network firewall?
  5. During a complex deployment, you observe that a WAF is causing high latency for legitimate users due to deep packet inspection. Which strategy is most appropriate to optimize performance without sacrificing security?

Answers and explanations come after you submit.