If a web-application firewall(s) is used:
i. Describe how the web-application firewall was observed to be placed in front of all public-facing web applications.
ii. Describe the observed web-application firewall configurations for:
o Detecting web-based attacks
o Preventing web-based attacks
iii. Describe how the web-application firewall was observed to:
o Detect web-based attacks
o Prevent web-based attacks