212-89 Web Application Incidents Practice Question
Which TWO settings in a WAF policy are most effective at mitigating automated bot-driven web attacks?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Implementation of a CAPTCHA challenge
Rate limiting and challenge-response mechanisms (like CAPTCHA) are the most effective controls for blocking automated bots.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enabling verbose debugging mode
Why it's wrong here
Debugging mode exposes sensitive information and does not block bots.
- ✓
Implementation of a CAPTCHA challenge
Why this is correct
CAPTCHA effectively differentiates human users from automated scripts.
- ✗
Disabling all HTTP POST requests
Why it's wrong here
This would break legitimate application functionality.
- ✓
Rate limiting based on IP address
Why this is correct
Rate limiting prevents bots from making too many requests in a short time.
- ✗
Reducing the global connection timeout
Why it's wrong here
This affects all users and does not stop targeted bots.
About these practice questions
One of 206 original 212-89 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official EC-Council exam blueprint
This 212-89 practice question is part of Courseiva's free EC-Council certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 212-89 exam.