Objective 2.07 Explain Reporting and Remote Logging Capabilities 303 Practice Questions (Page 3)

Questions 11–13

1. 11foundation · easy

   An F5 BIG-IP ASM administrator needs to verify that a remote logging server is reachable from the BIG-IP system. Which command should be used to test basic network connectivity to the remote logger?

   • Atmsh show sys log remote
   • Btmsh list sys syslog
   • Cping <remote-logger-ip>
   • Dcurl http://<remote-logger-ip>
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company has a remote logging server that is currently receiving ASM logs. They recently changed the logging level from 'all logs' to 'illegal requests' to reduce noise. After the change, they notice that the remote server is still receiving a high volume of logs. What is the most likely reason for this?

   • AThe logging level change was not applied to the active policy or the remote logger configuration.
   • BThe remote server is configured to request all logs regardless of the BIG-IP setting.
   • CThe 'illegal requests' level still includes all requests that are not explicitly allowed by the policy.
   • DThe remote logger is not accessible, so logs are being buffered and sent in batches.
   Reveal Solution Discussion Select an answer first
3. 13expert · hard

   A company has two ASM policies: one for their public-facing website and one for their internal application. They have a single remote logging server. They want to send 'all logs' for the public website and 'illegal requests' for the internal application. How can they achieve this?

   • AConfigure the remote logger to use 'all logs' and enable logging only for the public website policy.
   • BConfigure two separate remote loggers, one for each policy, with the appropriate logging level.
   • CSet the remote logger to 'all logs' and filter the logs on the remote server.
   • DUse the same remote logger and set the logging level to 'illegal requests' for both policies.
   Reveal Solution Discussion Select an answer first