Objective 4.07 Differentiate Between Blocking and Transparent Features 303 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which ASM feature uses reputation data to actively block traffic from known malicious sources?

   • ALearning mode
   • BAlerting
   • CReporting
   • DIP intelligence
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   When is it most appropriate to use transparent ASM features instead of blocking features?

   • AWhen the ASM policy is being tuned and the administrator wants to avoid disrupting legitimate traffic
   • BWhen the organization has a strict requirement to block all malicious traffic
   • CWhen the application is in production and must be protected immediately
   • DWhen the application is under a DDoS attack and needs immediate mitigation
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is required to block attacks for PCI compliance, but they are also in the middle of a major application release and cannot afford any downtime. They have a short window to deploy ASM. What is the best approach to meet compliance without risking the release?

   • ADeploy ASM in blocking mode with a strict policy to ensure compliance immediately.
   • BDeploy ASM in transparent mode, generate a PCI report, and then switch to blocking mode after the release.
   • CDeploy ASM in blocking mode but only for IP intelligence, and use transparent mode for signatures.
   • DDelay ASM deployment until after the release.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An organization is required to produce a PCI compliance report that shows the status of security policy violations and the remediation actions taken. The ASM is currently in transparent mode. What should you do to ensure the report includes the necessary data?

   • ADisable learning to prevent false positives from appearing in the report.
   • BEnable logging and alerting for all security policy violations in ASM.
   • CSwitch ASM to blocking mode to ensure violations are actively prevented.
   • DUse a third-party log analyzer to parse ASM logs and create the report manually.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which ASM feature operates in a transparent manner by observing traffic and learning normal behavior without blocking?

   • ALearning mode
   • BBot mitigation
   • CBlocking signatures
   • DIP intelligence
   Reveal Solution Discussion Select an answer first