AWS WAF for web application firewall - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is AWS WAF?

AWS WAF is a web application firewall that helps protect your web applications from common web exploits and attacks by controlling the traffic that reaches your applications.

beginner

How does AWS WAF protect your web application?

AWS WAF lets you create rules to allow, block, or count web requests based on conditions like IP addresses, HTTP headers, or query strings, helping to stop malicious traffic before it reaches your app.

intermediate

What is a Web ACL in AWS WAF?

A Web ACL (Access Control List) is a set of rules that AWS WAF uses to inspect and filter web requests for your application.

beginner

Name two common conditions you can use in AWS WAF rules.

You can use IP addresses and string matching in HTTP headers or query strings as conditions in AWS WAF rules.

beginner

Why is AWS WAF important for web applications?

AWS WAF helps keep your web applications safe by blocking attacks like SQL injection and cross-site scripting, which can steal data or damage your site.

What does AWS WAF primarily protect?

A Databases from hardware failure

B Web applications from web attacks

C Virtual machines from malware

D Network routers from overload

AWS WAF is designed to protect web applications by filtering and monitoring HTTP traffic.

What is a Web ACL in AWS WAF?

A A database for storing user data

B A virtual private cloud

C A set of firewall rules to filter web requests

D A load balancer configuration

A Web ACL is a collection of rules that AWS WAF uses to inspect and control web traffic.

Which of these can be a condition in an AWS WAF rule?

A Network speed

B CPU usage

C Disk space

D IP address

AWS WAF rules can use IP addresses as conditions to allow or block traffic.

AWS WAF helps prevent which type of attack?

A SQL injection

B Power outage

C Hardware failure

D Phishing emails

AWS WAF can block SQL injection attacks by inspecting web requests.

Which AWS service does AWS WAF integrate with to protect web applications?

A Amazon CloudFront

B Amazon S3

C Amazon RDS

D AWS Lambda

AWS WAF integrates with Amazon CloudFront to protect content delivered through the CDN.

Explain how AWS WAF helps protect a web application from attacks.

Think about how a security guard checks visitors before they enter a building.

Describe what a Web ACL is and its role in AWS WAF.

Imagine a checklist that decides who can enter a party.