Which of the following protection rules are provided by WAF to better protect from CC attack? (the number of correct answers: 2)