Web Application Firewall (WAF) CASENET Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is HTTP parameter pollution (HPP) as a WAF bypass technique?

   • ASending a very large number of requests to overwhelm the WAF.
   • BSending multiple parameters with the same name so that the WAF inspects one value while the application uses another.
   • CModifying the HTTP method from GET to POST.
   • DUsing a proxy to hide the source IP address.
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A company's .NET web application accepts only a fixed set of HTTP methods (GET, POST, PUT, DELETE) and a known set of URL paths. The security team wants to block all other requests while minimizing false positives. Which WAF security model should be implemented?

   • AAnomaly-based model that learns normal traffic over time
   • BHybrid model that logs all traffic and blocks only high-risk signatures
   • CPositive security model that allows only the known HTTP methods and URL paths
   • DNegative security model that blocks known attack signatures
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company is deploying a WAF in front of a high-traffic .NET application. The WAF introduces additional latency, and the security team is concerned about performance. They also need to ensure that the WAF does not become a single point of failure. Which configuration best addresses both concerns?

   • APlace the WAF in bridge mode to reduce latency
   • BDeploy two WAF instances in an active-active load-balanced configuration
   • CUse a WAF in log-only mode to reduce processing overhead
   • DDeploy one WAF instance with a larger hardware specification
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Where is a Web Application Firewall typically placed in a web application deployment to provide optimal protection?

   • AOn the same server as the database, to monitor SQL queries directly.
   • BInside the application's business logic layer, as a code library that filters inputs.
   • CIn front of the web application, between the client and the application server, so all incoming HTTP/HTTPS traffic passes through it.
   • DOn the client's device, to prevent the user from sending malicious requests.
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   What is a common performance impact of deploying a WAF in front of a web application?

   • AIncreased latency due to additional processing of HTTP requests.
   • BNo performance impact if the WAF is deployed in passive mode.
   • CReduced server CPU usage because the WAF offloads encryption.
   • DDecreased network bandwidth because the WAF compresses traffic.
   Reveal Solution Discussion Select an answer first