Exam PT0-002 topic 1 question 367 discussion

The vulnerability here is that the penetration tester was successfuly able to communicate with App01.example.com directly with the Nmap scan, meaning it wasn't filtered and stopped by the WAF. -"Bypass the WAF to communicate directly with App01.example.com" is the vulnerability. Since it's obvious that the WAF isn't properly filtering the direct traffic to the web application, you would need to deploy practices to prevent that malicious traffic from reaching the application in the first place -"Restrict direct communications to App01.example.com to only approved components" would ensure that the WAF is properly reviewing the components of the requests made directly to App01.example.com to determine if they are malicious -"Require an additional authentication header value between CDN.example.com and App01.example.com" This would ensure that App01.example.com would only respond to requests authenticated by the WAF