Objective 3.02 Determine How a Policy Should Be Adjusted Based Upon Available Data (e.g., Learning Suggestions, Log Data, Application Changes, Traffic Type, User Requirements) 303 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A web application starts accepting JSON payloads in addition to form data. The ASM policy is configured to only allow form data. Users report that legitimate JSON requests are being blocked. What should you do?

   • ADisable the content type enforcement in the policy.
   • BChange the policy's enforcement mode to 'Transparent' to allow JSON requests.
   • CAdd a new content type for JSON and update the policy to allow it.
   • DKeep the policy as is and require users to use form data.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A new reverse proxy is placed in front of a web application. How could this infrastructure change affect the ASM policy's effectiveness?

   • AThe policy will no longer be able to inspect traffic
   • BThe policy will automatically update to include the proxy's IP address
   • CThe policy may block legitimate traffic if the proxy's IP address is not trusted
   • DThe policy's attack signatures will become outdated
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Users are experiencing performance issues because the ASM policy is blocking legitimate requests. Which policy adjustment could improve usability while maintaining security?

   • AAdd the legitimate requests to the policy's allowed list
   • BDisable all attack signatures
   • CChange the enforcement mode to blocking
   • DChange the enforcement mode to transparent
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   An organization has added a new CDN in front of its web application. Which ASM policy adjustment is most appropriate to accommodate this change?

   • AAdd the CDN's IP addresses to the IP intelligence allowlist
   • BDisable all attack signatures
   • CUpdate the attack signatures to include CDN-specific attacks
   • DChange the policy's enforcement mode to transparent
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   After a web application is moved to a new server with a different IP address, what is the most likely impact on the ASM policy?

   • AThe policy will need to be recreated from scratch
   • BThe policy will continue to work without any changes
   • CThe policy's attack signatures will be invalidated
   • DIP intelligence rules may block traffic from the new server's IP
   Reveal Solution Discussion Select an answer first