What traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)

Blocking traffic to inappropriate web sites is typically a function of URL filtering or web filtering, not a primary capability of a WAF profile.

WAFs are specifically designed to detect and block SQL injection attacks by analyzing web application traffic for malicious SQL code patterns.

WAFs can prevent server information disclosure by sanitizing responses and blocking attempts to extract sensitive server details from web application traffic.

Credit card data leaks are primarily prevented by Data Loss Prevention (DLP) systems, which inspect content for sensitive information, rather than by a WAF.

WAFs can identify and block communication with known botnet C&C servers by analyzing HTTP/HTTPS traffic for suspicious patterns or known malicious destinations.