Objective 1.06 Evaluate the Implications of Changes in the Policy to the Security and Vulnerabilities of the Application 303 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company is considering enabling ASM's data guard feature to protect sensitive data in a high-traffic application. The security team is concerned about the performance impact of deep content inspection. The application team requires minimal latency. Which approach should the security team take?

   • AEnable data guard with a low enforcement readiness period to minimize impact.
   • BDisable data guard and rely on encryption at rest.
   • CEnable data guard only for specific URLs that handle sensitive data and test in staging.
   • DEnable data guard on all responses and measure the impact in production.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Why is a high false positive rate a concern for application security?

   • AIt makes the policy more secure because it blocks more traffic.
   • BIt reduces the performance of the ASM, causing it to drop packets.
   • CIt can lead to security alerts being ignored, allowing real attacks to go unnoticed.
   • DIt has no impact on security; it only affects user experience.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following best describes the relationship between application change rate and ASM policy maintenance effort?

   • AHigher change rates require more frequent policy tuning and validation.
   • BChange rate has no impact on policy maintenance because ASM policies are static.
   • CHigher change rates lead to lower maintenance effort because the policy becomes more accurate over time.
   • DLower change rates require more frequent policy updates to compensate for lack of activity.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company's application is updated daily with new features and content. The ASM policy is manually updated, and the security team is overwhelmed by the number of changes. They are considering automating policy updates. What is the primary consideration when automating policy updates?

   • AEnsuring the automation is approved by the application team.
   • BEnsuring the automation is reversible in case of errors.
   • CEnsuring the automation does not introduce false positives by incorrectly allowing malicious requests.
   • DEnsuring the automation runs during off-peak hours to minimize performance impact.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which policy change is most likely to increase the processing overhead on the BIG-IP ASM?

   • AChanging the enforcement mode from blocking to alarming.
   • BEnabling additional attack signatures for a wide range of attack types.
   • CDisabling a rarely used signature set.
   • DReducing the number of parameters that are validated.
   Reveal Solution Discussion Select an answer first