Certified Cloud Security Professional (CCSP) — Question 453

Web application firewalls (WAFs) are designed primarily to protect applications from common attacks like:

Answer options

• A. Ransomware
• B. Syn floods
• C. XSS and SQL injection
• D. Password cracking

Correct answer: C

Explanation

The correct answer is C, as WAFs specifically protect against application-layer threats like XSS and SQL injection, which target web applications. Options A, B, and D refer to different types of attacks that are either network-based or not primarily focused on web application vulnerabilities.