A web application firewall (WAF) can understand and act on ________ traffic. Response:

While a WAF acts on malicious HTTP traffic, "Malicious" describes the nature of the traffic, not the protocol it understands.

SMTP (Simple Mail Transfer Protocol) is for email and is not directly analyzed or protected by a WAF.

ICMP (Internet Control Message Protocol) is used for network diagnostics and error reporting, and is outside the scope of a WAF's primary function.

A Web Application Firewall (WAF) operates at Layer 7 (the application layer) of the OSI model and is specifically designed to analyze, filter, and monitor HTTP/HTTPS traffic between a web application and the internet to detect and block common web exploits.