To answer this question, let's go through each option to understand why it is correct or incorrect:
Option A) Detection of some attacks - This option is incorrect because one of the advantages of web application firewall technology is its ability to detect and prevent various types of attacks, such as SQL injection, cross-site scripting (XSS), and cross-site request forgery (CSRF).
Option B) Configuration and performance - This option is correct because one of the drawbacks of web application firewall technology is the complexity of configuration and its potential impact on performance. Implementing and properly configuring a web application firewall can be a time-consuming and challenging task. Additionally, if the firewall rules are not optimized correctly, it can lead to false positives or false negatives, affecting the performance and functionality of the web application.
Option C) Flexible policy enforcement - This option is incorrect because web application firewall technology offers flexible policy enforcement. It allows administrators to define and enforce specific security policies based on their requirements, such as blocking specific types of requests or preventing unauthorized access.
Option D) Specialized security knowledge - This option is incorrect because while deploying and managing a web application firewall may require some level of specialized security knowledge, it is not necessarily a drawback of the technology itself. Specialized security knowledge is often required for any security solution implementation to ensure its effectiveness.
The correct answer is B) Configuration and performance. This option is correct because the complexity of configuration and potential impact on performance are common drawbacks of web application firewall technology.