Web Application Firewall (WAF) and OWASP Top Ten CSE Practice Questions (Page 10)

Questions 46–50

1. 46foundation · easy

   How does a WAF enhance logging and monitoring?

   • ABy generating detailed logs of all HTTP requests and responses, including blocked attacks
   • BBy storing logs on the application server
   • CBy encrypting all log files
   • DBy automatically responding to attacks without human intervention
   Reveal Solution Discussion Select an answer first
2. 47application · medium

   A company's web application returns credit card numbers in API responses. The security team wants to use a WAF to reduce the risk of sensitive data exposure. Which WAF feature should they enable?

   • ARequest rate limiting for all API endpoints
   • BEnabling TLS 1.2 on the WAF listener
   • CResponse body inspection with credit card number masking
   • DIP reputation blocking for known malicious IPs
   Reveal Solution Discussion Select an answer first
4. 48application · medium

   After enabling a managed XSS rule set in block mode, a company's support team reports that legitimate user comments containing HTML tags are being blocked. The security team wants to reduce false positives while still blocking real XSS attacks. What is the best approach?

   • ADisable the XSS rule set entirely to allow all user comments
   • BBlock all user comments that contain any HTML tags
   • CIncrease the sensitivity of the XSS rule set to block more requests
   • DSwitch the rule set to detection mode and analyze the blocked requests to identify patterns that can be excluded
   Reveal Solution Discussion Select an answer first
5. 49foundation · easy

   How can a WAF be integrated with a CDN for centralized security management?

   • ABy storing WAF logs on the CDN
   • BBy applying WAF rules at the CDN edge to filter traffic before it reaches the origin
   • CBy using the CDN to encrypt all traffic
   • DBy replacing the origin server with the CDN
   Reveal Solution Discussion Select an answer first
6. 50application · medium

   A company's web application has an admin panel at /admin. The security team wants to use a WAF to enforce that only requests from the internal corporate IP range can access /admin. Which WAF rule should they configure?

   • AAllow requests to /admin only if the source IP is in the corporate range; block all other requests to /admin
   • BAllow all requests to /admin and log the source IP
   • CBlock all requests to /admin regardless of source IP
   • DRate-limit requests to /admin to 5 per minute per IP
   Reveal Solution Discussion Select an answer first