Objective 2.02 Explain the Policy Builder Lifecycle 303 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company has a BIG-IP ASM policy in enforcement mode. The security team wants to ensure the policy remains effective as the application evolves. What is the best ongoing maintenance practice?

   • ASet the policy to learning mode permanently.
   • BRecreate the policy from scratch every few months.
   • CRegularly review learning suggestions and update the policy accordingly.
   • DOnly update the policy when a security incident occurs.
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which sequence best describes the overall phases of the BIG-IP ASM policy builder lifecycle?

   • ACreate policy, learn traffic, enforce, tune, maintain
   • BCreate policy, enforce, learn traffic, tune, maintain
   • CLearn traffic, create policy, enforce, maintain, tune
   • DEnforce policy, learn traffic, create policy, maintain, tune
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which phase of the policy builder lifecycle involves analyzing traffic to build a baseline of normal application behavior?

   • AInitial policy creation
   • BPolicy deployment
   • CPolicy tuning
   • DTraffic learning
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company is deploying BIG-IP ASM for a new web application that will launch in two weeks. The security team wants to minimize false positives during the initial rollout while still providing protection. They plan to run the policy builder in learning mode for the first week, then switch to enforcement. Which initial policy creation setting best supports this plan?

   • ASelect 'Use a template' and immediately enforce the policy without learning.
   • BSelect 'Automatically learn from traffic' and set the enforcement readiness period to one week.
   • CSelect 'Learn from traffic' but set the enforcement readiness period to one day.
   • DSelect 'Block all traffic' and manually review the learning logs after one week.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company has a BIG-IP ASM policy that has been in enforcement mode for six months. They are planning a major application upgrade that will change the structure of several URLs and parameters. The security team wants to minimize downtime and false positives during the upgrade. What is the best strategy?

   • ACreate a new policy for the upgraded application, run it in learning mode, and then switch traffic to it after tuning.
   • BLeave the existing policy unchanged and rely on the default settings.
   • CUpdate the existing policy manually to match the new URLs and parameters.
   • DSwitch the existing policy to learning mode during the upgrade and then back to enforcement.
   Reveal Solution Discussion Select an answer first