Exam FCP_FGT_AD-7.4 Topic 2 Question 26 Discussion

The types of traffic and attacks that can be blocked by a Web Application Firewall (WAF) profile include:
C. Server information disclosure attacks: A WAF can help block attacks attempting to disclose sensitive information about the server.
D. Credit card data leaks: A WAF can be configured to detect and block attempts to leak credit card or other sensitive data.
E. SQL injection attacks: WAFs are effective in blocking SQL injection attacks, where attackers attempt to manipulate a web application's database by injecting malicious SQL code. Options A and B are not typically associated with the primary functions of a WAF:
A. Traffic to botnet servers: This is often more related to network security or threat intelligence solutions rather than the primary function of a WAF.
B. Traffic to inappropriate websites: Blocking traffic to inappropriate websites is generally handled by content filtering or URL filtering solutions rather than a WAF.