Q21
Single choice
The anti-tampering technology of Huawei WAF products is based on the cache module. Suppose that when user A visits website B, website B shows signs of page tampering. The workflow for the WAF tamper-proof module includes the following steps:
WAF starts the learning mode to learn the page content of the user's visit to the website.
WAF stores the content of the page in the cache after learning.
When the user accesses the webpage, WAF obtains the page content from the server.
WAF compares the watermark of the server page content with the page content in the cache.
If tampering is detected, WAF uses the cached page to return to the client.
For the ordering of these steps, which of the following options is correct?