WAF device's working mode does not include which of the following?

Question

Options

• AForward proxy
• BReverse proxy
• CBridge mode
• DTransparent proxy

• A
  78% (14)
• B
  11% (2)
• C
  6% (1)
• D
  6% (1)

Explanation

Forward proxy is not a WAF deployment mode because WAFs are designed to protect web servers, not clients - a forward proxy sits between clients and the internet (protecting outbound traffic), which is the opposite of a WAF's purpose. Reverse proxy (B) is a standard WAF mode where it intercepts traffic destined for the web server, inspecting requests before they reach the origin. Bridge mode (C) allows the WAF to sit inline on the network at Layer 2, passing traffic transparently without requiring IP changes. Transparent proxy (D) intercepts traffic at Layer 3/4 without clients knowing, making it a valid WAF deployment.

Memory tip: Think of a WAF as a bouncer at the back door (server side) - it faces inward toward servers, not outward toward the internet like a forward proxy would. If the mode protects clients browsing outward, it doesn't belong on a WAF.

No community discussion yet for this question.