Akamai interview question

What does a WAF do during a SQL attack?