F5 Certified Technology Specialist, BIG-IP ASM (F5-CTS, BIG-IP ASM)

303

The F5 Certified Technology Specialist, BIG-IP ASM certification validates your expertise in deploying, configuring, and managing F5 BIG-IP Application Security Manager (ASM) to protect applications from web-based threats. It is designed for security professionals who secure application delivery with F5 technology. Earning it demonstrates your ability to implement and maintain robust web application security.

Practice Free Questions

4Domains

25Objectives

105Practice pages

472Free questions

303 free practice questions

Choose any objective and open any question page — no sign-in required.

Objective 1.01 Explain the potential effects of common attacks on web applications

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–24

Objective 1.02 Explain how specific security policies mitigate various web application attacks

31 questions · 7 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–30 31–31

Objective 1.03 Determine which ASM mitigation is appropriate for a particular vulnerability

17 questions · 4 pages

Questions 1–5 6–10 11–15 16–17

Objective 1.04 Choose the appropriate policy features and granularity

10 questions · 2 pages

Questions 1–5 6–10

Objective 1.05 Determine the most appropriate deployment method for a given set of requirements

12 questions · 3 pages

Questions 1–5 6–10 11–12

Objective 1.06 Evaluate the implications of changes in the policy to the security and vulnerabilities of the application

10 questions · 2 pages

Questions 1–5 6–10

Objective 2.01 Determine the appropriate criteria for initial policy definition based on application requirements (e.g., wildcards, violations, entities, signatures, user-defined signatures)

14 questions · 3 pages

Questions 1–5 6–10 11–14

Objective 2.02 Explain the policy builder lifecycle

29 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–29

Objective 2.03 Review and evaluate rules based on information gathered from ASM (e.g., attack signatures, DataGuard, parameters, entities)

17 questions · 4 pages

Questions 1–5 6–10 11–15 16–17

Objective 2.04 Refine policy structure for policy elements (e.g., URLs, parameters, files types, headers, sessions and logins, content profiles, CSRF protection, anomaly protection)

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–24

Objective 2.05 Explain the process to integrate and configure natively supported third-party vendors and generic formats with ASM (e.g., difference between scanning modes, iCAP)

18 questions · 4 pages

Questions 1–5 6–10 11–15 16–18

Objective 2.06 Determine whether the rules are being implemented effectively and appropriately to mitigate the violations

11 questions · 3 pages

Questions 1–5 6–10 11–11

Objective 2.07 Explain reporting and remote logging capabilities

13 questions · 3 pages

Questions 1–5 6–10 11–13

Objective 3.01 Interpret log entries to identify opportunities to refine the policy

21 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–21

Objective 3.02 Determine how a policy should be adjusted based upon available data (e.g., learning suggestions, log data, application changes, traffic type, user requirements)

24 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–24

Objective 4.01 Describe the lifecycle of attack signatures

22 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

Objective 4.02 Evaluate the impact of new or updated attack signatures on existing security policies

14 questions · 3 pages

Questions 1–5 6–10 11–14

Objective 4.03 Identify key ASM performance metrics (e.g., CPU report, memory report, process requests, logging)

22 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

Objective 4.04 Interpret ASM performance metrics and draw conclusions

26 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–26

Objective 4.05 Identify and gather information relevant to evaluating the activity of an ASM implementation

27 questions · 6 pages

Questions 1–5 6–10 11–15 16–20 21–25 26–27

Objective 4.06 Interpret the activity of an ASM implementation to determine its effectiveness

19 questions · 4 pages

Questions 1–5 6–10 11–15 16–19

Objective 4.07 Differentiate between blocking and transparent features

20 questions · 4 pages

Questions 1–5 6–10 11–15 16–20

Objective 4.08 Evaluate whether a security policy is performing per the requirements (i.e., blocking, transparent, or other relevant security features)

18 questions · 4 pages

Questions 1–5 6–10 11–15 16–18

Objective 4.09 Define the ASM policy management functions (e.g., auditing merging, reverting, import, export)

22 questions · 5 pages

Questions 1–5 6–10 11–15 16–20 21–22

Objective 4.10 Explain the circumstances under which it is appropriate to use ASM bypass

7 questions · 2 pages

Questions 1–5 6–7

Want a smarter study session?Try adaptive questions aimed at your weak spots, the illustrated book, and readiness you can trust.

Continue Free Practice

Percentages reflect share of the current practice bank, not official exam weightings. Every page above is a live, crawlable practice page (25 objectives · 105 pages).

F5 Certified Technology Specialist, BIG-IP ASM (F5-CTS, BIG-IP ASM)

303 free practice questions

Domain 1 · Section 1: Assess security needs and choose an appropriate ASM policy22% of practice bank · 6 objectives · 104 questions22%

Domain 2 · Section 2: Create and customize policies27% of practice bank · 7 objectives · 126 questions27%

Domain 3 · Section 3: Maintain policy10% of practice bank · 2 objectives · 45 questions10%

Domain 4 · Section 4: Administer and evaluate ASM implementation42% of practice bank · 10 objectives · 197 questions42%