Objective 3.02 Determine How a Policy Should Be Adjusted Based Upon Available Data (e.g., Learning Suggestions, Log Data, Application Changes, Traffic Type, User Requirements) 303 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A web application now uses WebSocket connections. Which ASM policy setting should be adjusted to accommodate this change?

   • AChange the enforcement mode to blocking
   • BDisable HTTP protocol checks
   • CAdd a new attack signature for WebSocket attacks
   • DEnable WebSocket security in the policy
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of reviewing learning suggestions in ASM?

   • ATo update the policy to reflect current application behavior
   • BTo change the enforcement mode of the policy
   • CTo block all traffic from new IP addresses
   • DTo identify new attack patterns
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A company is migrating its web application from an on-premises data center to a cloud provider. The ASM policy is currently configured with geolocation enforcement that blocks traffic from certain countries. After the migration, the application's IP addresses change, and the geolocation data may be inaccurate. What is the best approach to handle this?

   • AKeep the current geolocation settings and rely on the cloud provider's IP reputation.
   • BDisable geolocation enforcement until the new IP addresses are accurately mapped.
   • CUpdate the geolocation database with the new IP addresses and verify the policy's enforcement.
   • DChange the policy to block all traffic from the cloud provider's IP range.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which data source should be prioritized when deciding which policy adjustments are most critical for security?

   • APerformance metrics
   • BLearning suggestions
   • CAttack signature alerts
   • DUser feedback
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An ASM policy has a large number of learning suggestions. The security team has limited time to review them. Which suggestions should be prioritized for review?

   • ASuggestions that involve new URLs or parameters, as they may indicate application changes or attacks.
   • BSuggestions that involve minor changes to existing entities, such as new values for a parameter.
   • CSuggestions that are generated by requests from trusted IP addresses.
   • DSuggestions that are generated by a small number of requests.
   Reveal Solution Discussion Select an answer first