Web Application Firewall (WAF) CASENET Practice Questions (Page 7)

Questions 31–35

1. 31foundation · easy

   Which WAF rule action would you use to allow a request to pass through to the application while still recording the request for later analysis?

   • ABlock
   • BLog
   • CChallenge
   • DRedirect
   Reveal Solution Discussion Select an answer first
2. 32expert · hard

   A DevOps team is integrating WAF rule changes into their CI/CD pipeline. They want to ensure that new rules do not introduce false positives that block legitimate traffic in production. Which approach is most effective?

   • ARun automated tests against a staging environment with a copy of production traffic and analyze WAF logs for false positives
   • BUse a WAF rule that only logs in production for the first week, then switch to block
   • CDeploy the new rules directly to production and monitor logs for a week
   • DDisable the WAF in production until the rules are proven
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A development team wants to integrate WAF rule changes into their CI/CD pipeline so that every application release is tested against the WAF configuration before deployment. What is the best approach?

   • AStore WAF rules as code and run automated tests that send attack payloads to a staging environment
   • BDeploy the application first and then configure the WAF in production
   • CDisable the WAF during CI/CD testing to avoid interference
   • DManually update the WAF rules after each release
   Reveal Solution Discussion Select an answer first
5. 34foundation · easy

   In a typical web application security architecture, what is the primary role of a Web Application Firewall (WAF)?

   • ATo provide a secure VPN tunnel for remote administrators to access the web server management interface.
   • BTo replace the application's authentication mechanism by validating user credentials before allowing access.
   • CTo inspect and filter HTTP/HTTPS traffic between clients and the web application, blocking malicious requests based on application-layer rules.
   • DTo encrypt all data stored in the application's database to prevent unauthorized access at rest.
   Reveal Solution Discussion Select an answer first
6. 35foundation · easy

   A WAF rule is designed to block cross-site scripting (XSS) attacks. Which of the following payloads would this rule most likely flag?

   • A../../etc/passwd
   • BSELECT * FROM users
   • CGET /index.php HTTP/1.1
   • D<script>alert('xss')</script>
   Reveal Solution Discussion Select an answer first