Objective 4.07 Differentiate Between Blocking and Transparent Features 303 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which component is typically included in a PCI compliance report generated by BIG-IP ASM?

   • AConfiguration backup schedule for the BIG-IP device
   • BList of all users with administrative access to the BIG-IP system
   • CDetails of ASM policy violations and attack types detected
   • DNetwork topology diagram of the data center
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which ASM feature is designed to actively prevent malicious traffic from reaching the application?

   • AReporting
   • BBlocking signatures
   • CAlerting
   • DLearning mode
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A large e-commerce site is running ASM in blocking mode. During a peak sales event, the security team notices a surge in false positives that are blocking legitimate customers. They suspect a new attack signature is too broad. They need to maintain protection against the actual attack but immediately reduce the impact on customers. Which approach should you take?

   • ASet the problematic signature to alarm mode and create a custom signature for the actual attack pattern.
   • BSwitch the entire ASM policy to transparent mode until the event is over.
   • CDisable the problematic signature and rely on other signatures for protection.
   • DIncrease the security level to a stricter setting to filter out false positives.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A security analyst wants to understand the types of attacks targeting their web application without affecting production traffic. They need detailed logs of attack attempts. Which ASM configuration should you use?

   • ATransparent mode with logging enabled
   • BIP intelligence in blocking mode
   • CBlocking mode with all signatures enabled
   • DBot mitigation in transparent mode
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A financial services company is deploying ASM for a new customer-facing web application. The security team wants to understand attack patterns and tune the policy before enforcing any blocks. They also need to ensure that legitimate users are not disrupted during the initial rollout. Which ASM configuration should you implement?

   • AEnable transparent mode with learning enabled and alerting configured for all security policy violations.
   • BEnable blocking mode with a high security level and set the enforcement mode to blocking for all signatures.
   • CDisable all security features and rely on network firewall logs for attack analysis.
   • DEnable blocking mode but only for IP intelligence, leaving signatures in transparent mode.
   Reveal Solution Discussion Select an answer first