Objective 4.09 Define the ASM Policy Management Functions (e.g., Auditing Merging, Reverting, Import, Export) 303 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   When exporting an ASM policy, which of the following is a configurable option?

   • AChoosing to encrypt the export file with a password
   • BSelecting the export file format as PDF
   • CSpecifying the target BIG-IP system's IP address
   • DIncluding only the policy's security settings
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   After applying a new ASM policy update, the security team notices that legitimate traffic is being blocked. The administrator needs to quickly restore the previous working policy configuration. What should the administrator do?

   • AReview the policy log to identify the change and manually undo it.
   • BMerge the current policy with an older exported policy to revert the changes.
   • CExport the current policy and then import it again to reset the configuration.
   • DUse the revert function to roll back to the last saved version of the policy.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A security auditor needs to determine whether any unauthorized changes were made to the ASM policy in the past month. The administrator has access to the policy log and the current policy. What is the most effective way to identify unauthorized changes?

   • AReview the policy log for changes and compare them against the list of authorized changes.
   • BRevert the policy to a previous version and then compare it to the current version.
   • CExport the current policy and compare it to the policy log entries.
   • DMerge the current policy with a previous version and review the differences.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An administrator suspects that a recent change to the ASM policy has caused an increase in false positives. The administrator wants to identify exactly what changed in the policy over the last week. What should the administrator use?

   • AThe export function, to compare the current policy with a previously exported file.
   • BThe import function, to load a previous version and compare.
   • CThe merge function, to see how the policy has changed over time.
   • DThe ASM policy log, which records all changes made to the policy.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   An ASM administrator needs to create a backup of a security policy to transfer it to another BIG-IP system. Which action accomplishes this?

   • AUse the tmsh save sys config command
   • BExport the policy to an XML file
   • CCreate a new policy and manually replicate all settings
   • DCopy the policy from the /config/asm directory using SCP
   Reveal Solution Discussion Select an answer first