What types of traffic and attacks can be blocked by a web application firewall (WAF) profile? (Choose three.)

A Web Application Firewall (WAF) profile provides specialized, application-layer protection for web servers. Its core function is to inspect HTTP/S traffic for common web-based attacks. This includes using signatures to detect and block SQL injection attempts, which target the application's database. It can also prevent the leakage of sensitive data, such as credit card numbers, from server responses using data leak prevention (DLP) techniques. Furthermore, WAF can block attacks aimed at disclosing server information, like software versions in headers, which attackers could use for reconnaissance.

A. Traffic to botnet servers is blocked by the IPS engine's botnet C&C database or the Web Filter, not by the WAF profile which protects inbound traffic to your servers.

B. Traffic to inappropriate web sites is a function of the Web Filter security profile, which controls outbound user access to the internet.

1. FortiOS 7.0.0 Administration Guide, "Web application firewall," Section: "Signatures". This section details protections against SQL Injection and Information Disclosure.

2. FortiOS 7.0.0 Administration Guide, "Web application firewall," Section: "Data Leak Prevention". This section describes how WAF can be configured to block sensitive data like credit card numbers.

3. Fortinet NSE 4 - FortiOS 7.0 Study Guide, "Security Profiles," page 273. It states, "WAF can detect and block known attacks, such as... SQL injection... It can also provide data leak prevention (DLP) by scanning outgoing web server traffic for sensitive information."