Objective 1.03 Determine Which ASM Mitigation Is Appropriate for a Particular Vulnerability 303 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   A security analyst is using a vulnerability assessment tool to prepare for configuring an ASM policy. What is the primary purpose of such a tool in this context?

   • ATo automatically block malicious traffic in real time
   • BTo identify and categorize security weaknesses that may be exploited
   • CTo provide real-time attack logs for forensic analysis
   • DTo replace the need for a web application firewall
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A vulnerability assessment of a web application reveals that it is vulnerable to a newly discovered zero-day attack for which no ASM signature exists yet. The application cannot be taken offline, and the security team needs to implement a mitigation that can detect and block the attack based on its behavior rather than a known signature. Which ASM mitigation should be used?

   • APlace the entire policy in learning mode.
   • BEnable the XSS signature set in blocking mode.
   • CEnable the bot defense feature to block automated attack tools.
   • DEnable the SQL injection signature set in blocking mode.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company has a web application that is protected by an ASM policy. A vulnerability assessment reveals that the application is vulnerable to both SQL injection and XSS. The security team wants to mitigate both vulnerabilities, but they are concerned about the performance impact of enabling multiple signature sets in blocking mode. They also need to minimize false positives. Which approach should the security team take?

   • APlace the policy in learning mode to observe traffic before enabling any signatures.
   • BEnable the SQL injection signature set in blocking mode and the XSS signature set in alarm mode.
   • CEnable only the XSS signature set in blocking mode because it is more critical.
   • DEnable both the SQL injection and XSS signature sets in blocking mode, and monitor for false positives.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security analyst is reviewing the results of a vulnerability assessment for a web application. The report categorizes vulnerabilities by severity and type, including SQL injection, XSS, and command injection. The analyst needs to prioritize which ASM mitigations to configure first. Based on the vulnerability assessment, which approach should the analyst take?

   • ADisable all ASM features until the development team fixes the code.
   • BPrioritize configuring mitigations for the highest-severity vulnerabilities first.
   • CPlace the entire policy in learning mode to observe all traffic first.
   • DConfigure all available ASM signatures in blocking mode simultaneously.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A security analyst runs a vulnerability scan against a web application and discovers that the application is vulnerable to a known SQL injection flaw in a third-party library. The application team cannot patch the library for 30 days. The analyst needs to configure an ASM mitigation that provides immediate protection while the patch is pending. Which ASM mitigation should the analyst configure?

   • APlace the policy in learning mode for the affected URL.
   • BDeploy a custom XSS signature for the library.
   • CEnable bot defense with a CAPTCHA challenge.
   • DEnable the SQL injection signature set in blocking mode.
   Reveal Solution Discussion Select an answer first