Objective 1.06 Evaluate the Implications of Changes in the Policy to the Security and Vulnerabilities of the Application 303 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company's application changes frequently, and the ASM policy is updated manually. The security team is considering using the ASM's learning and suggestion feature to automate policy updates. What is the main risk of relying heavily on automated suggestions?

   • AThe suggestions will always be accurate and require no review.
   • BThe suggestions may be based on a limited sample of traffic and could miss legitimate variations.
   • CThe suggestions will increase the performance overhead of the ASM.
   • DThe suggestions will automatically block all new traffic patterns.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary goal when balancing security and manageability in an ASM policy?

   • AAchieve the highest possible security regardless of operational burden.
   • BFind a level of protection that is effective without making the policy impractical to maintain.
   • CEliminate all false positives by making the policy as permissive as possible.
   • DMinimize administrative effort even if it means accepting more risk.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is the most likely consequence of making an ASM policy more strict?

   • AFalse positive rate increases, which can block legitimate users.
   • BFalse positive rate remains the same because it depends on the application, not the policy.
   • CFalse positive rate decreases, improving user experience.
   • DFalse positive rate becomes unpredictable and cannot be managed.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   An application is updated with new features every two weeks. What is the most likely impact of this change rate on ASM policy maintenance?

   • AThe policy will require frequent review and updates to accommodate new parameters and URLs.
   • BThe policy will become less important because frequent changes reduce the need for security controls.
   • CThe policy can be set once and will automatically adapt to all future changes without manual intervention.
   • DThe policy should be set to a strict learning mode and never changed to maintain security.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   An ASM policy is set to block all requests that do not match a strict positive security model. What is the most likely trade-off?

   • ABoth security and manageability decrease because the policy is too complex.
   • BIncreased manageability but reduced security because the policy is easier to maintain.
   • CBoth security and manageability improve because the policy is more precise.
   • DIncreased security but reduced manageability due to more false positives and administrative overhead.
   Reveal Solution Discussion Select an answer first