Learn the vocabulary of inspecting and blocking a malicious HTTP request before it reaches the app.
0 / 5 completed
1 / 5
At standup, a dev mentions a layer that inspects incoming HTTP requests against known attack signatures, like SQL injection patterns, and blocks a malicious one before it ever reaches the application. What is this layer called?
A Web Application Firewall, or WAF, inspects incoming HTTP requests against known attack signatures, like a SQL injection pattern, and blocks a malicious one before it ever reaches the application. A load balancer distributes traffic across backend instances but has no built-in inspection of a request's actual content for a malicious pattern. This signature-based inspection is what lets a WAF catch a known attack pattern at the network edge, before it can touch application code.
2 / 5
During a design review, the team wants to test a newly written WAF rule by only logging what it would have blocked, without actually blocking any real traffic yet. Which capability supports this?
A detection-only, or log, mode lets the team see exactly what a newly written WAF rule would have blocked, without actually blocking any real traffic while the rule is still being validated. Deploying every new rule directly into blocking mode risks disrupting legitimate traffic the moment an imperfect rule goes live. This detection-only mode is what lets a team safely validate a rule's behavior against real traffic before trusting it to enforce anything.
3 / 5
In a code review, a dev notices a custom WAF rule added specifically to block an attack pattern that showed up in the application's own logs, beyond whatever a generic managed rule set already covers. What does this represent?
A custom rule extends the WAF's managed rule set to cover an attack pattern that's specific to one particular application, one that a generic managed rule set was never written to anticipate. Relying only on the generic managed rule set leaves exactly that kind of application-specific pattern unaddressed. This ability to layer a custom rule on top of a managed set is what lets a WAF adapt to the real attacks a specific application actually faces.
4 / 5
An incident report shows legitimate customer traffic was blocked for several hours because a newly written WAF rule was deployed straight into blocking mode without first running it in detection-only mode to see what it would have flagged. What practice would prevent this?
Running every new WAF rule in detection-only mode first, reviewing what it would have blocked, catches a false positive against legitimate traffic before the rule is ever allowed to actually enforce blocking. Deploying a rule directly into blocking mode with no such validation is exactly what caused the hours-long outage for legitimate customers in this incident. This detection-first workflow is a standard safeguard for rolling out any new WAF rule.
5 / 5
During a PR review, a teammate asks why the team puts a WAF in front of the application instead of relying solely on the application's own input validation to catch a malicious request. What is the reasoning?
Application-level input validation only covers the specific inputs a developer anticipated when writing that particular endpoint, leaving a gap at any endpoint the developer hasn't reviewed as carefully. A WAF provides a centralized layer that can catch a known attack signature across every endpoint uniformly, including one that hasn't received the same scrutiny. The tradeoff is that a WAF is a defense-in-depth layer, not a replacement for genuinely fixing an underlying application-level vulnerability.
What does the "Web Application Firewall Vocabulary" vocabulary exercise cover?
This exercise tests real IT vocabulary related to web application firewall vocabulary through 5 multiple-choice questions, each built from realistic workplace sentences rather than abstract definitions.
Is this vocabulary exercise free to use?
Yes. Every exercise on CoderSlingo, including this one, is completely free — no account, sign-up, or payment required.
How many questions does this exercise have?
This exercise has 5 questions. Each one shows a real-world sentence or scenario with multiple-choice options and an explanation once you answer.
What happens after I answer a question?
You'll see immediate feedback showing whether your answer was correct, along with a short explanation of why — then a button to move to the next question, and a full results screen at the end.
Can I retry the exercise if I get questions wrong?
Yes. Once you reach the results screen, click "Try again" to reset your answers and go through the exercise from the start as many times as you like.
Do I need to create an account to take this exercise?
No account is needed. Your answers are scored in your browser during the session — nothing is saved to a server, so you can jump straight in.
Is my progress saved if I leave the page?
No — progress within an exercise resets if you navigate away or reload. Each exercise is short enough to complete in a few minutes in one sitting.
Are these vocabulary exercises connected to other topics?
Yes — browse the full vocabulary exercises hub to find related modules covering adjacent IT topics and roles.
How is this different from reading a glossary or blog article?
Exercises like this one are active recall drills — you have to choose the correct term or phrasing yourself, which builds retention faster than passively reading a definition.
Where can I find more vocabulary exercises?
Browse the full Vocabulary exercises hub for hundreds of modules covering Agile, DevOps, security, databases, architecture, and more — organised by IT role and skill.