Objective 1.05 Determine the Most Appropriate Deployment Method for a Given Set of Requirements 303 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An organization is using ASM to protect a web application that has a critical endpoint accepting JSON payloads. The security team wants to enforce a strict schema on this endpoint. They notice that the standard ASM policy's automatic learning has not created any schema for this endpoint because the traffic is not typical HTML form data. What is the most appropriate action?

   • AEnable the 'Learn, Learn, Learn' mode and wait for the system to eventually build a schema.
   • BManually define the JSON schema in the ASM policy for that specific URL.
   • CChange the application to send data as standard HTML form parameters instead of JSON.
   • DDisable ASM on this endpoint and rely on the application's own input validation.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A policy change increases the maximum length of a username parameter from 20 to 100 characters. What new risk does this introduce?

   • ANo new risk because longer usernames are always safe.
   • BCross-site scripting because longer usernames can contain scripts.
   • CSQL injection because longer usernames can contain SQL syntax.
   • DBuffer overflow attacks if the application does not handle long inputs safely.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   An ASM policy is modified to allow a wider range of characters in a parameter to reduce false positives. What is the most likely security impact?

   • AIt will decrease the risk of injection attacks because the policy is more flexible.
   • BIt will only affect performance, not security.
   • CIt has no security impact because ASM still blocks all attacks.
   • DIt may increase the risk of injection attacks because more malicious payloads could pass validation.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company needs to protect a web application that is accessed by both internal employees and external customers. The internal users authenticate via a legacy SSO system, while external users use a modern OAuth provider. The ASM policy needs to handle both authentication methods without blocking legitimate traffic. What is the most appropriate deployment method?

   • ADeploy two separate ASM virtual servers, one for internal traffic and one for external traffic, each with a tailored policy.
   • BDeploy a single ASM virtual server and use iRules to rewrite all authentication requests to a single format.
   • CDeploy a single ASM virtual server and disable authentication checks in the policy.
   • DDeploy a single ASM virtual server and configure it to trust both SSO headers, allowing any request with either header.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security administrator is reviewing the ASM policy and notices that a specific parameter has been added to the 'Allowed Parameters' list. This parameter is used to pass a user's role ID to the application. What is the most significant vulnerability implication of this policy change?

   • AThe parameter will be logged in clear text, creating a data leak risk.
   • BThe parameter will be removed from the request before it reaches the application, breaking functionality.
   • CThe parameter will be automatically encrypted by ASM, preventing any tampering.
   • DAn attacker could modify the role ID parameter to escalate their privileges, and ASM will not block it because it is in the allowed list.
   Reveal Solution Discussion Select an answer first