MENU
The development team is building pods to host a web front end, and they want to protect these pods with an application firewall.
Which type of policy should be created to protect this pod from Layer7 attacks?
Suggested Answer: D
Get Premium CloudSec-Pro Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
To protect the pods hosting a web front end from Layer 7 attacks, the development team should create a Web Application and API Security (WAAS) rule targeted at the image name of the pods. This approach allows the policy to specifically protect the applications running within the pods against sophisticated attacks that target the application layer.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/waas/deploy_waas
21 comments · newest first
TE
Teresita
4 days ago
I disagree, B covers all resources, more comprehensive.
ME
Merissa
10 days ago
I think option A is the best choice. Specific targeting is key.
DE
Delisa
15 days ago
Agreed. Layer 7 needs careful handling.
BE
Bettina
20 days ago
Exactly! A or C feels safer overall.
LA
Lajuana
25 days ago
D seems too narrow. What if the image changes?
DE
Delisa
1 month ago
True, but it might be overkill.
LA
Lajuana
1 month ago
But B covers all resources. More coverage, right?
BE
Bettina
1 month ago
C does sound solid. Real-time protection is key.
DE
Delisa
2 months ago
I prefer C. Runtime policies are crucial for Layer 7.
LA
Lajuana
2 months ago
A focuses on the specific host. Less risk.
BE
Bettina
2 months ago
Why A? Isn't B more comprehensive?
LA
Lajuana
2 months ago
I think option A is the best choice.
GI
Giuseppe
2 months ago
Wait, I didn't know WAAS could be used like this!
LE
Lenita
2 months ago
C sounds solid, runtime policies are crucial for security!
CU
Curtis
3 months ago
Isn't D too narrow? What if the image name changes?
MA
Marge
3 months ago
I disagree, B seems more comprehensive for all resources.
JA
Jacki
3 months ago
I think option A is the best choice for specific protection.
AL
Alethea
3 months ago
I feel like option B could be a good choice since it mentions all resources on the host, but I’m not entirely confident about the implications for Layer 7 attacks.
RA
Raylene
3 months ago
I practiced a similar question where we had to choose between WAAS rules and runtime policies, and I think targeting the image name might be too narrow.
MA
Margo
3 months ago
I think option C sounds right because runtime policies usually deal with network protections, but I can't recall if they cover Layer 7 attacks specifically.
ME
Meaghan
4 months ago
I remember something about WAAS rules being specifically designed for web application security, but I'm not sure if they should be host-specific or resource-specific.