Objective 4.09 Define the ASM Policy Management Functions (e.g., Auditing Merging, Reverting, Import, Export) 303 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A security auditor needs to verify that the ASM policy in production matches the approved baseline policy that was exported six months ago. The administrator wants to identify any differences between the two policies. What should the administrator do?

   • ARevert the current policy to the baseline version.
   • BMerge the baseline policy with the current policy and review the merged result.
   • CImport the baseline policy into production to overwrite the current policy.
   • DExport the current production policy and use the compare feature to diff it against the baseline file.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A company has two ASM policies that need to be merged. The policies have conflicting settings for several signatures, and the security team wants to ensure that the final policy uses the most restrictive settings for all conflicts. The merge process does not automatically choose the most restrictive setting. What should the administrator do?

   • ACompare the two policies using the diff tool and then manually create a new policy from scratch.
   • BRevert both policies to their original versions and then merge them.
   • CMerge the policies and manually select the most restrictive setting for each conflict.
   • DExport both policies and then import them into a new policy, letting the system automatically choose the most secure setting.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which of the following is a prerequisite for reverting an ASM policy to a previous version?

   • AThe policy must be currently applied to a virtual server
   • BThe policy must be exported to an XML file first
   • CA previously saved version of the policy must exist
   • DThe administrator must have root access to the BIG-IP system
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A security administrator needs to import an ASM policy from a file that was exported from a BIG-IP device running a different version of the ASM software. The administrator is concerned that the import might fail or cause issues. What should the administrator do to ensure a successful import?

   • AManually edit the file to match the local BIG-IP version before importing.
   • BImport the file directly and then check the policy log for any errors.
   • CUse the import wizard, which validates the file and reports any compatibility issues before the import is completed.
   • DRevert the local ASM policy to a previous version before importing the new file.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company has two ASM policies: one for its main website and one for a partner portal. The security team wants to create a single consolidated policy that includes the best of both, but they are concerned about conflicting settings, such as different enforcement modes for certain attack signatures. What is the correct approach to handle this?

   • AMerge the two policies, and during the merge process, manually resolve any conflicts that are flagged.
   • BExport both policies and then import them into a new policy, letting the system automatically resolve conflicts.
   • CCompare the two policies using the diff tool and then manually create a new policy from scratch.
   • DRevert both policies to their original versions and then merge them.
   Reveal Solution Discussion Select an answer first