Objective 1.03 Determine Which ASM Mitigation Is Appropriate for a Particular Vulnerability 303 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   A web application has a known vulnerability that allows attackers to inject malicious SQL commands into database queries. Which ASM mitigation is designed to address this vulnerability type?

   • ABot defense
   • BSQL injection signature set
   • CIP address intelligence
   • DLearning mode
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   A vulnerability assessment report lists a cross-site scripting (XSS) flaw in a web application. How does this information guide ASM policy selection?

   • AIt signals that the ASM should have an XSS signature enabled to detect and block such attacks
   • BIt suggests that the ASM should be placed in learning mode to observe traffic
   • CIt indicates that the ASM should be configured to enforce SSL/TLS encryption
   • DIt means the ASM should be configured to block all POST requests
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   An organization has a low-risk internal application that is not exposed to the internet. Which ASM mitigation approach is most suitable for this scenario?

   • AConfiguring bot defense to block all automated traffic
   • BEnabling all signatures in blocking mode immediately
   • CUsing learning mode to build a baseline before enforcing
   • DDisabling the ASM entirely because the application is internal
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company's web application allows users to upload profile pictures. A vulnerability assessment reveals that the application does not validate file types, allowing attackers to upload malicious executable files. The security team needs an ASM mitigation that prevents the upload of dangerous file types while minimizing false positives for legitimate image uploads. Which ASM mitigation should be configured?

   • AConfigure a file type signature to block executable extensions.
   • BSet the policy to learning mode for the upload URL.
   • CEnable the XSS signature set in blocking mode.
   • DEnable bot defense to block automated uploads.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company's web application has a login form that is vulnerable to brute force attacks. The security team wants to mitigate this vulnerability, but they are concerned about locking out legitimate users who may forget their passwords. They need a mitigation that slows down automated attempts without completely blocking access after a few failures. Which ASM mitigation should be configured?

   • AConfigure a brute force policy to block the IP after 3 failed attempts.
   • BEnable the SQL injection signature set in blocking mode.
   • CPlace the login URL in learning mode.
   • DEnable bot defense with a CAPTCHA challenge after a few failed attempts.
   Reveal Solution Discussion Select an answer first