Objective 2.06 Determine Whether the Rules Are Being Implemented Effectively and Appropriately to Mitigate the Violations 303 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which ASM violation is triggered when a request contains a parameter that is not defined in the security policy?

   • AParameter value length exceeded
   • BParameter name is too long
   • CParameter value does not match data type
   • DIllegal parameter
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company runs a web application that allows users to login. The ASM policy enforces the 'Brute force' violation in blocking mode. The security team notices that legitimate users are being blocked after several failed login attempts, even though they are using the correct password. The application uses a CAPTCHA after three failed attempts. What should the security team do to reduce false positives while still protecting against brute force attacks?

   • AChange the 'Brute force' violation to alarming mode.
   • BIncrease the threshold for the 'Brute force' violation.
   • CAdd a security policy exception for the login page.
   • DDisable the 'Brute force' violation for the login page.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   After analyzing traffic logs, an administrator notices that many requests are being blocked due to the 'Parameter value length exceeded' violation, but these requests appear legitimate. What is the most appropriate action to adjust the violation enforcement?

   • AIncrease the maximum parameter length in the policy
   • BIgnore the violation in the logs
   • CDisable the violation entirely
   • DChange the violation to alert-only
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A healthcare company hosts a patient portal that handles sensitive medical data. The compliance team requires that all requests containing credit card numbers be blocked to prevent data leakage. The ASM policy currently enforces the 'Credit card number' violation in blocking mode. However, the security team notices that legitimate requests containing a 16-digit number that is not a real credit card are being blocked. What should the security team do to reduce false positives while still meeting the compliance requirement?

   • AAdd a security policy exception for the specific parameter that contains the 16-digit number.
   • BChange the 'Credit card number' violation to alarming mode.
   • CRefine the credit card number detection to use Luhn algorithm validation.
   • DDisable the 'Credit card number' violation for the specific parameter.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   An application handles credit card numbers and must comply with PCI DSS. Which ASM violation type is most directly relevant to this compliance goal?

   • AIllegal parameter
   • BParameter value length exceeded
   • CParameter value does not match data type
   • DCredit card number violation
   Reveal Solution Discussion Select an answer first