WAF Flashcards
1
Q
WAF means
A
Web applications firewall
2
Q
What does WAF do?
A
Prevents common attack patterns, and attempts to distinguish between genuine and malicious requests.
3
Q
What do WAF conditions do?
A
Allow you to specify conditions that WAF should consider.
4
Q
What are the two types of WAF rules?
A
Regular
Rate Based
5
Q
When to use WAF?
A
Always!
6
Q
Web ACL rules are executed sequentially. True or false?
A
True
7
Q
Web ACL outcomes are?
A
Allow
Block
Count
8
Q
WAF charges on three components. They are…
A
Number of incoming requests
Number of web ACLs
Number of rules in an ACL
9
Q
WAF Limitations: rate based rules per account
A
5
10
Q
WAF Limitations: ACL Limit
A
50 per account
11
Q
Generally speaking. WAF rules should be grouped in this order
A
Whitelist
Blacklist
Bad signature
