HTTPS citizen applications need filtering against common Layer 7 web exploits such as injection and abusive bots. Which control is designed for that HTTP(S) application layer?
Select an answer to reveal the explanation.
Short Explanation
A WAF sits in front of the web app and looks at the HTTP conversation—not just IP and port—to swat injection attempts and nasty bots. Routes and backup policies do not read those payloads. For Layer 7 web abuse, the WAF is the right tool.
Full Explanation
A web application firewall (WAF) inspects HTTP(S) traffic to detect and block common application-layer attacks and abusive patterns. Static routing, archival lifecycle policies, and BMC firmware updates do not provide Layer 7 web exploit filtering. Cloud+ security controls include WAF placement for Internet-facing web applications.