Objective 2.02 Explain the Policy Builder Lifecycle 303 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the primary purpose of deploying a BIG-IP ASM policy to production?

   • ATo test the policy in a lab environment
   • BTo back up the policy configuration
   • CTo delete the policy from the system
   • DTo apply the policy to live traffic
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is a typical step in the initial policy creation process using the policy builder?

   • AConfiguring the SMTP alert server
   • BManually adding all URL parameters
   • CSelecting the application's deployment scenario
   • DSetting the policy to blocking mode immediately
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   An administrator is running the policy builder in learning mode. The policy has been learning for a week, and the learning suggestions show a high number of false positives for a particular parameter. The administrator wants to reduce the noise and improve the policy's accuracy. What should they do?

   • ASwitch to enforcement mode immediately to stop the noise.
   • BDelete the parameter from the policy.
   • CAdjust the learning settings to be more permissive for that parameter.
   • DIgnore the learning suggestions and continue learning indefinitely.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company is deploying BIG-IP ASM for a web application that is accessed by both internal employees and external customers. The security team wants to ensure that the policy builder learns from all traffic without exposing sensitive data. What should they consider during initial policy creation?

   • AConfigure the policy builder to learn from all traffic, but ensure that sensitive parameters are masked in learning logs.
   • BDisable learning and manually configure the policy.
   • COnly learn from internal traffic to avoid exposing sensitive data.
   • DUse a template that does not require learning.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   When creating a new security policy with the BIG-IP ASM policy builder, which initial setting must be chosen?

   • AAttack signature set
   • BDeployment scenario
   • CEnforcement mode
   • DTraffic learning duration
   Reveal Solution Discussion Select an answer first