CV0-004 Security Practice Question
A security administrator is configuring a Web Application Firewall (WAF) to protect a public-facing web application. The application experiences a high volume of traffic from certain geographic regions that are not serving customers. Which WAF feature should be used to block this traffic?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Geo-blocking
Geo-blocking allows the WAF to block or allow traffic based on geographic location, reducing unwanted traffic and potential attacks.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Rate limiting
Why it's wrong here
Rate limiting caps request frequency per client, so distributed traffic from many source addresses in those regions still passes. It is tempting because it mitigates volumetric abuse, but it is correct against floods or brute force, not for denying traffic based on geographic origin.
- ✗
OWASP rule set
Why it's wrong here
OWASP rules inspect request payloads for injection and similar application-layer attacks; they do not evaluate source geography. They are tempting because they form the WAF's core protection, but they would be correct against application exploits, whereas blocking regions requires geo-filtering by source IP.
- ✓
Geo-blocking
Why this is correct
Geo-blocking inspects the source IP's geographic origin and denies requests from specified countries or regions, directly satisfying the requirement to drop traffic from regions that generate no customers. It filters at the WAF layer before requests reach the application, unlike rate limiting or signature-based rules.
- ✗
IP reputation lists
Why it's wrong here
IP reputation lists block addresses with known malicious history, not entire regions; the traffic here is legitimate but unwanted, so geolocation filtering is required. Reputation lists would be the right choice when blocking traffic from sources flagged for spam, malware or prior attacks.
Go deeper
Related to this question
About these practice questions
One of 834 original CV0-004 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CV0-004 practice question is part of Courseiva's free CompTIA certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CV0-004 exam.