Objective 1.05 Determine the Most Appropriate Deployment Method for a Given Set of Requirements 303 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   An ASM policy is changed to allow HTML tags in a comment field. What new vulnerability is most likely introduced?

   • ADenial of service because HTML tags increase bandwidth.
   • BCross-site scripting (XSS) because attackers can inject script tags.
   • CSQL injection because HTML tags can be used in SQL queries.
   • DNo new vulnerability because HTML tags are harmless.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   An application uses a non-standard HTTP method (e.g., PATCH) extensively, and the standard ASM template does not allow it. What is the most appropriate custom deployment approach?

   • AUse the standard template and block all PATCH requests.
   • BCreate a custom ASM policy that explicitly allows the PATCH method while maintaining security checks.
   • CUse the standard template and ignore the PATCH method in the policy.
   • DDisable ASM for the application because it cannot handle non-standard methods.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   A web application uses a mix of static and dynamic content, with some pages requiring strict parameter validation and others being intentionally flexible. The standard ASM deployment template applies uniform security settings. What does this scenario represent?

   • AA non-canned deployment scenario because the standard template's uniform settings do not fit the mixed requirements.
   • BA standard deployment scenario because all web applications have mixed content.
   • CA scenario that requires disabling ASM for static content.
   • DA scenario where ASM cannot be deployed because of the mixed content.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   An application requires different security levels for different URL paths: /admin needs strict validation, while /public allows flexible input. The standard template applies uniform settings. What is the most appropriate custom deployment method?

   • AUse the standard template and apply the strictest settings to all paths.
   • BCreate a custom policy with separate security profiles for each URL path.
   • CUse the standard template and disable security for /public.
   • DUse a separate ASM device for each path.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   An administrator is about to deploy a new ASM policy that includes a new 'File Type' for uploads. The application will now accept .exe files from authenticated users. What is the most critical security consideration for this policy change?

   • AThe .exe file type could be used to upload malware, so the policy should be configured to scan the file for viruses.
   • BAllowing .exe uploads will increase the attack surface, as ASM will now permit a potentially malicious file type to be uploaded.
   • CThe .exe file type will be automatically blocked by ASM's default security checks.
   • DThe .exe file type will be automatically quarantined by ASM for manual review.
   Reveal Solution Discussion Select an answer first