Your company just deployed a WAF to protect its resources. You need to create a baseline before you start blocking traffic. How will you achieve this?
A) Set the WAF to Monitor mode.
B) Set the WAF to its defaults and let it do its job.
C) Setup a Lambda function to monitor Flow Logs and analyze the traffic using Elasticsearch.
D) A WAF is default deny and does not allow this. You need to use an IDS instead.

Question

Quizplus · Accepted Answer

Setting the WAF to Monitor mode allows you to observe and analyze traffic patterns without blocking any traffic, helping you establish a baseline for normal activity.

Your Company Just Deployed a WAF to Protect Its Resources