Objective 1.01 Explain the Potential Effects of Common Attacks on Web Applications 303 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which BIG-IP ASM mechanism is used to prevent sensitive data such as credit card numbers from being transmitted in HTTP responses?

   • AAttack signatures
   • BBot defense
   • CData loss prevention
   • DDoS protection
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   A security team is configuring ASM for a web application that is subject to both SQL injection and cross-site scripting attacks. The team wants to minimize false positives while ensuring both attack types are blocked. Which configuration approach is MOST effective?

   • AUse a single custom signature that covers both SQL injection and XSS
   • BEnable both SQL injection and XSS signature sets, and set enforcement to 'Block' after a learning period
   • CEnable only the SQL injection signature set and rely on bot defense for XSS
   • DEnable both signature sets but set them to 'Alarm' mode to avoid any false positives
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A financial services company hosts a customer-facing loan application portal. An attacker exploits a SQL injection flaw in the loan search feature and exfiltrates the customer database, including social security numbers and account balances. The incident is reported in the press. Which combination of impacts is the MOST direct result of this attack?

   • AMalware infection of end-user client devices
   • BService disruption and loss of availability for legitimate users
   • CSession hijacking and unauthorized administrative access
   • DData breach, regulatory fines, and reputational damage
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A large online retailer is under a Layer 7 HTTP flood attack. The attack uses many distributed IPs sending legitimate-looking GET requests for the product catalog, causing the application servers to become overloaded and unresponsive. Which ASM mechanism is MOST appropriate to mitigate this attack?

   • AData Guard to prevent sensitive data leakage
   • BSignature-based attack detection for known exploit payloads
   • CDoS protection with behavioral and rate-based detection
   • DParameter validation to reject malformed input
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   An attacker floods a web application with a high volume of requests, causing the server to become unresponsive to legitimate users. Which technical impact is most directly associated with this attack?

   • AUnauthorized access to administrative functions
   • BService disruption due to resource exhaustion
   • CSession hijacking of active users
   • DData tampering of stored records
   Reveal Solution Discussion Select an answer first