A web application uses a Web Application Firewall (WAF). Where is the WAF located in relation to the application?
A user submits the input <script>alert("hi")</script> in a comment box. What is the most likely outcome?
A system receives hundreds of login requests from the same IP address in a few seconds. What is most likely happening?
Which type of attack is a WAF specifically designed to detect and block?
A user enters ' OR 1=1; into a login field. Why would a WAF likely block this input?
What happens if a request looks completely normal to the WAF but contains hidden malicious intent?
Which best describes the primary purpose of a WAF?
A user submits an extremely long string that exceeds the expected input size. The WAF allows it. What happens next?
What is a buffer in an application?
Why are buffers created with a fixed size?
What is the purpose of the extra memory segments placed before and after a buffer?
A runtime check detects that the memory outside the buffer has been altered. What does the system do?
Which situation would most likely trigger a runtime check failure?
A developer wants to prevent attacks that involve sending too much data to an application. Which defense is most relevant?
Which statement best explains how a WAF and runtime checks work together?
A request passes through the WAF and causes the program to crash due to excessive input size. What does this show?
Which of the following best describes a limitation of a WAF?
A user enters normal text into a search bar, and the request passes through all layers without issue. What is the most likely reason?
Why is it important to have both a WAF and runtime checks?
A student claims that a WAF can stop buffer overflow attacks by detecting large inputs. Why is this incorrect?