A Web Application Firewall (WAF) inspects HTTP requests at the application layer, filtering malicious traffic such as floods of GET and POST requests while allowing legitimate traffic, which aligns with the described DoS/DDoS mitigation scenario.

Tess King is attempting to gather all DNS records from a target zone. This process is referred to as a zone transfer (AXFR), which is typically performed by secondary name servers to synchronize DNS data with the primary. If improperly secured, attackers can initiate unauthorized zone transfers to enumerate valuable information such as:
Hostnames
IP addresses
Mail servers
Name servers
CEH v13 defines a zone transfer as a crucial step in DNS enumeration.
From CEH v13 Official Courseware:
Module 3: Scanning Networks
Topic: DNS Enumeration # Zone Transfers
CEH v13 Study Guide states:
"A zone transfer (AXFR) is a DNS transaction used to replicate DNS databases. Attackers can exploit this feature to extract all DNS information from an improperly secured server." Incorrect Options:
A). Zone harvesting is not a formal term.
C). Zone update refers to DNS dynamic update operations (e.g., DDNS).
D). Zone estimate is not a DNS-related process.
Reference:CEH v13 Study Guide - Module 3: DNS Enumeration # Zone TransfersRFC 5936 - DNS Zone Transfer Protocol
======

The snmp-processes NSE script queries the SNMP service to enumerate running processes on the target system. When SNMPv2 is exposed with the default "public" community string, this script can retrieve detailed process information, which is valuable for identifying exploitable services and planning privilege escalation or lateral movement.

Sensitive data is stored locally on the device without encryption or access controls, allowing unauthorized access. This directly corresponds to insecure data storage, a common mobile security risk.

Using outdated libraries with known vulnerabilities introduces supply chain risk because attackers can exploit publicly known CVEs in third-party components integrated into the application.