question and answer about web-application-firewall