Objective 4.02 Evaluate the Impact of New or Updated Attack Signatures on Existing Security Policies 303 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company has a BIG-IP ASM policy in staging that is about to be promoted to production. The security team has just applied the latest signature update to the BIG-IP system. Before promoting the policy, what must the team do to ensure the policy includes the new signatures?

   • AWait for the next automatic update cycle
   • BUpdate the policy to associate it with the latest signature set
   • CDelete and recreate the policy with the new signatures
   • DExport the policy and re-import it into production
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of applying a signature fix to a BIG-IP ASM system?

   • ATo remove outdated signatures from the system.
   • BTo change the enforcement mode of the security policy.
   • CTo add new attack signatures to the system.
   • DTo correct issues with existing signatures, such as false positives or false negatives.
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A security team has a BIG-IP ASM policy that is in staging mode. A new signature update is applied to the system. The team updates the policy to include the new signatures. After monitoring for a week, they notice no false positives. They decide to switch the policy to enforcement mode. However, they notice that the policy is not blocking a known attack that the new signature should detect. What is the most likely reason?

   • AThe policy was updated with the wrong signature set
   • BThe policy was not enforced after the update
   • CThe signature is disabled in the policy
   • DThe signature update was not applied to the system
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An organization runs multiple BIG-IP ASM policies for different applications. A new signature update is released, and the security team wants to apply it to the system. However, they are concerned that the update might introduce false positives in one of their legacy applications. What is the recommended approach to handle this?

   • AApply the update to the system and then test it in a staging policy before updating production policies
   • BApply the update only to the legacy application's policy
   • CApply the update and immediately enforce it on all policies
   • DSkip the update for the legacy application
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   An ASM administrator has applied a signature fix to address a false positive issue. What is the next step to ensure the fix is used by an existing security policy?

   • AThe system must be rebooted to activate the fix.
   • BThe fix is automatically applied to all policies on the system.
   • CThe policy must be updated to include the fixed signature.
   • DThe fix must be exported and re-imported into the policy.
   Reveal Solution Discussion Select an answer first