nerdexam
(ISC)2

CCSP · Question #840

Web application firewalls (WAFs) are designed primarily to protect applications from common attacks like:

The correct answer is C. XSS and SQL injection. WAFs detect how the application interacts with the environment, so they are optimal for detecting and refuting things like SQL injection and XSS. Password cracking, syn floods, and ransomware usually aren't taking place in the same way as injection and XSS, and they are better…

Submitted by dimitri_ru· Apr 18, 2026Cloud Application Security

Question

Web application firewalls (WAFs) are designed primarily to protect applications from common attacks like:

Options

  • ARansomware
  • BSyn floods
  • CXSS and SQL injection
  • DPassword cracking

How the community answered

(40 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    95% (38)

Explanation

WAFs detect how the application interacts with the environment, so they are optimal for detecting and refuting things like SQL injection and XSS. Password cracking, syn floods, and ransomware usually aren't taking place in the same way as injection and XSS, and they are better addressed with controls at the router and through the use of HIDS, NIDS, and antimalware tools.

Topics

#WAF#Web Application Security#SQL Injection#XSS

Community Discussion

No community discussion yet for this question.

Full CCSP Practice