ITPEC FE Morning April 2021 Question 41
ITPEC FE Morning April 2021 — Question 41 of 80
WAF (Web Application Firewall) — identifies the device placed between client and web server to inspect HTTP traffic and block application-layer attacks.
WAF operates at Layer 7 (Application layer) and analyzes the content of HTTP requests.
What WAF blocks:
- SQL injection
- Cross-site scripting (XSS)
- Command injection
- Other OWASP Top 10 attacks
Why not others:
- (a) Cluster configuration — groups servers for redundancy/performance, does not inspect traffic
- (b) Load balancing function — distributes requests across servers, no content inspection
- (c) SSL-VPN function — encrypts remote access tunnels, does not analyze application data
Key rule: "inspect data sent to web server" + "block attacks like SQL injection" → WAF.
AI-generated — may contain errors
The original exam layout is preserved in the image so diagrams, formulas, tables, and code remain accurate.
This question comes from an official ITPEC past paper. ITPEC Practice is an independent study tool and is not affiliated with ITPEC. See the official FE past-paper collection or Report an issue.