Objective 2.05 Explain the Process to Integrate and Configure Natively Supported Third-Party Vendors and Generic Formats with ASM (e.g., Difference Between Scanning Modes, iCAP) 303 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which of the following is a supported third-party vendor format for importing scan results into ASM?

   • ANessus XML
   • BAcunetix XML
   • COpenVAS XML
   • DBurp Suite XML
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company uses IBM Security AppScan for scanning. The security team wants to import the scan results into ASM to improve the policy. What is the correct approach for this integration?

   • AManually create signatures based on the AppScan report.
   • BUse the AppScan API to push results directly to ASM.
   • CConvert the AppScan results to a Qualys XML format before importing.
   • DExport the AppScan results as an XML file and import it into ASM.
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A security team uses Qualys Web Application Scanning and wants to import the scan results into BIG-IP ASM to automatically create a learning suggestion for a new parameter that was discovered. The team has exported the report from Qualys. Which file format should the team upload to the ASM GUI to ensure the import is natively supported?

   • AHTML report with embedded JavaScript
   • BQualys XML report
   • CPDF executive summary
   • DCSV export of the vulnerability list
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An administrator uploads a scan result file, but ASM displays a warning that 'Some findings could not be mapped to any entity'. What should the administrator do to resolve this issue?

   • ADelete the unmapped findings from the scan report and re-upload.
   • BReview the unmapped findings and add the corresponding URLs or parameters to the policy's enforcement scope.
   • CRe-upload the file with a different vendor format.
   • DChange the policy's enforcement mode to 'Transparent' to allow all findings.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company has a compliance requirement to import scan results from a custom in-house scanner. The scanner outputs findings in a proprietary XML format. The security team wants to integrate this with ASM. What is the most efficient way to achieve this integration?

   • AConvert the proprietary XML to a supported vendor format, such as Qualys XML, before importing.
   • BRequest that F5 add support for the custom format.
   • CManually enter the findings into ASM using the GUI.
   • DUse the ASM REST API to upload the proprietary XML directly.
   Reveal Solution Discussion Select an answer first