Objective 2.02 Explain the Policy Builder Lifecycle 303 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   After running the policy builder in learning mode for two weeks, an administrator reviews the learning suggestions and notices that several legitimate file types (e.g., .pdf, .docx) are flagged as violations. The administrator wants to reduce false positives while maintaining security. What is the most appropriate action?

   • AIgnore the learning suggestions and leave the policy as is.
   • BSwitch to enforcement mode immediately without reviewing suggestions.
   • CAccept the learning suggestions for the legitimate file types and add them to the allowed file types list.
   • DDelete the learning suggestions and restart the learning process.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which task is part of ongoing maintenance of a BIG-IP ASM policy?

   • AChanging the deployment scenario weekly
   • BDisabling the virtual server
   • CDeleting the policy after one month
   • DRegularly reviewing and updating the policy based on new threats
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has a BIG-IP ASM policy in enforcement mode. The application team is planning to add a new feature that will introduce a new parameter to an existing endpoint. The security team wants to ensure the policy is updated without causing downtime. What is the best approach?

   • ALeave the policy unchanged and rely on the default settings.
   • BManually add the new parameter to the policy and enforce immediately.
   • CCreate a new policy for the new feature and deploy it separately.
   • DTemporarily switch the policy to learning mode, let it learn the new parameter, review suggestions, then re-enforce.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An organization is planning to deploy BIG-IP ASM for a legacy application that has been in production for years. They have a large amount of historical traffic logs but no existing ASM policy. The security team wants to minimize disruption during the initial deployment. What is the recommended first step in the policy builder lifecycle?

   • AImport the historical traffic logs into the policy builder to create the policy.
   • BCreate a new policy using the policy builder and run it in learning mode to observe live traffic.
   • CManually configure every entity and setting based on the application documentation.
   • DDeploy a default policy in enforcement mode immediately.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company has been running a BIG-IP ASM policy in enforcement mode for several months. Recently, they introduced a new API endpoint that accepts JSON payloads. The security team wants to ensure the policy adapts to this new traffic without causing downtime. What is the best approach?

   • AManually add the new API endpoint to the policy and immediately enforce.
   • BPut the policy back into learning mode temporarily, review suggestions, then re-enforce.
   • CLeave the policy unchanged and rely on the default security settings.
   • DCreate a new policy from scratch for the API and deploy it separately.
   Reveal Solution Discussion Select an answer first