Follow the request/data flow through the architecture.
Work through each concept and mark it understood. This unlocks the knowledge check.
A web application firewall filtering HTTP(S) by rules (SQLi, XSS, rate limits, geo).
Why it matters
Protects apps at Layer 7 in front of ALB/CloudFront/API Gateway.
When to use it
Use for public web apps needing OWASP protection or rate limiting.
Gotcha (exam trap)
WAF is L7 only — it does not stop network-layer (L3/L4) DDoS; that is Shield.
Bleepx skills build on each other. Continue your learning path across Query, Lab, and Cloud.