Web Application Firewall (WAF) Integration ECDE Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which WAF deployment model typically offers the lowest latency for on-premises applications because traffic does not need to leave the local network?

   • AOn-premises WAF
   • BHybrid WAF
   • CManaged WAF service
   • DCloud-based WAF
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary purpose of WAF logging?

   • ATo store user passwords securely.
   • BTo provide a record of traffic and blocked requests for analysis and auditing.
   • CTo automatically patch application vulnerabilities.
   • DTo replace the need for application logging.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A WAF administrator notices that a custom rule is blocking a legitimate API endpoint that accepts JSON payloads. The rule was designed to block SQL injection, but it is matching on the word 'select' in JSON keys. What is the best way to resolve this issue?

   • ARefine the rule to inspect only the values of JSON fields, not the keys, and test it against the API's legitimate payloads.
   • BChange the API to rename all JSON keys that contain 'select'.
   • CSet the rule action to 'Log' instead of 'Block' for this endpoint.
   • DDisable the custom rule and rely on the built-in SQL injection rules.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A security operations team wants to use WAF logs to detect and respond to attacks. They need to correlate WAF logs with other security events and enable real-time alerting. Which approach should they take?

   • AEnable WAF logging but only keep logs for 24 hours to save storage costs.
   • BStream WAF logs to a centralized SIEM and create correlation rules that trigger alerts on suspicious patterns.
   • CStore WAF logs in a local file on the web server and review them manually each week.
   • DConfigure the WAF to send an email to the security team for every blocked request.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary benefit of integrating WAF configuration into a CI/CD pipeline?

   • AIt eliminates the need for security testing in the pipeline.
   • BIt ensures that WAF changes are deployed consistently and automatically across environments.
   • CIt provides real-time monitoring of application performance.
   • DIt allows the WAF to automatically fix application code vulnerabilities.
   Reveal Solution Discussion Select an answer first