Combine edge controls with origin hardening rather than relying on one security product
You should be able to demonstrate the result described in the lesson and explain why each step was necessary.
Step-by-step
Map exposed services
List every public port and hostname before adding rules.
Protect the edge
Use Cloudflare proxying, managed protections, targeted WAF rules, and rate limits.
Protect the origin
Patch Linux, restrict management ports, and keep database services private.
Protect WordPress
Use strong authentication, updates, minimal plugins, and tested backups.
Observe logs
Use Cloudflare and origin logs to refine rules based on real attack traffic.
Test recovery
A security plan includes the ability to restore a known-good site.
You should be able to demonstrate the result described in the lesson and explain why each step was necessary.
Troubleshooting
If a command or screen differs from the lesson, stop and verify the version you are using before forcing a change.
What you learned
You now understand the purpose of this part of the system and have a concrete result you can verify before continuing to the next lesson.