A security engineer is configuring a WAF for a web application that uses both SQL and NoSQL databases. The WAF is in monitoring mode and has generated a high volume of alerts for requests containing the string 'OR 1=1'. The engineer wants to reduce false positives while still detecting real injection attempts. Which approach is most effective?

Disable all WAF rules and rely on the application's input validation

Keep the custom 'OR 1=1' rule and add a rule to block all requests containing 'OR'

Set the WAF to block all requests that contain any SQL keyword

Enable the OWASP CRS SQL injection rules in block mode and disable the custom 'OR 1=1' rule

What is insecure deserialization?

A vulnerability that allows attackers to steal session cookies

A vulnerability that occurs when untrusted data is used to instantiate objects in an application

A vulnerability that allows attackers to inject SQL queries

A vulnerability that allows attackers to perform denial-of-service attacks

How can a WAF help prevent sensitive data exposure?

By preventing users from downloading files

By enforcing HTTPS and masking sensitive fields in responses

By encrypting the database at rest

By blocking all requests that contain the word 'password'

How can a WAF rule block malicious XML payloads?

By disabling the XML parser on the server

By rejecting requests that contain DOCTYPE declarations or external entity references

By converting XML to JSON format

By encrypting all XML data in transit

EC-CouncilCloud Security Essentials

Domain 5Objective 2

Web Application Firewall (WAF) and OWASP Top Ten CSE Practice Questions (Page 5)

Part of the Application Security in the Cloud domain, which makes up ~16% of our current practice bank.

65questions here

13free pages

16concepts

16 Concepts in This Objective

WAF Fundamentals
WAF Deployment Models
WAF Rule Configuration
OWASP Top Ten Overview
Injection Attacks
Broken Authentication and Session Management
Sensitive Data Exposure
XML External Entities (XXE)
Broken Access Control
Security Misconfiguration
Cross-Site Scripting (XSS)
Insecure Deserialization
Using Components with Known Vulnerabilities
Insufficient Logging and Monitoring
WAF Integration with Cloud Services
WAF Testing and Tuning

Questions 21–25

21expert · hard
A security engineer is configuring a WAF for a web application that uses both SQL and NoSQL databases. The WAF is in monitoring mode and has generated a high volume of alerts for requests containing the string 'OR 1=1'. The engineer wants to reduce false positives while still detecting real injection attempts. Which approach is most effective?
Select an answer first
22foundation · easy
What is insecure deserialization?
Select an answer first
23foundation · easy
How can a WAF help prevent sensitive data exposure?
Select an answer first
24foundation · easy
How can a WAF rule block malicious XML payloads?
Select an answer first
25foundation · easy
What is a common example of an injection attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.

Web Application Firewall (WAF) and OWASP Top Ten CSE Practice Questions (Page 5)

Questions 21–25

What is insecure deserialization?

How can a WAF help prevent sensitive data exposure?

How can a WAF rule block malicious XML payloads?

What is a common example of an injection attack?

Keep studying — Application Security in the Cloud