Objective 2.05 Explain the Process to Integrate and Configure Natively Supported Third-Party Vendors and Generic Formats with ASM (e.g., Difference Between Scanning Modes, iCAP) 303 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   After importing a Netsparker scan result into ASM, a security analyst notices that the imported findings are not automatically creating new signatures in the policy. What is the correct interpretation of how ASM handles these imported findings?

   • AThe findings are discarded because Netsparker is not a supported vendor.
   • BThe findings are only used for reporting purposes and do not affect the policy configuration.
   • CThe findings are mapped to existing ASM signatures and entities, and new signatures are only created if they are not already present.
   • DThe findings are automatically converted into blocking rules that are immediately enforced.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   When ASM reports a validation error during scan result import, what should you check first?

   • AThe file's XML structure
   • BThe network connectivity to the vendor
   • CThe policy's enforcement mode
   • DThe file extension
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   After importing a third-party scan result, a security analyst notices that a new parameter was discovered and added to the policy. How does ASM determine the type of this new parameter?

   • AASM uses the parameter name to determine its type.
   • BASM infers the parameter type from the scan result data, such as the attack type or payload.
   • CASM requires the administrator to manually specify the parameter type after import.
   • DASM assigns a default type of 'String' to all new parameters.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following scan result formats can be imported into the BIG-IP ASM GUI from a third-party vendor?

   • APDF
   • BCSV
   • CQualys XML
   • DXML
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An administrator is trying to upload a scan result file to ASM but the 'Import' button is greyed out. The administrator is logged in as a user with the 'Application Security Manager' role. What is the most likely reason for the greyed-out button?

   • AThe file is too large to upload.
   • BThe browser does not support the upload feature.
   • CThe ASM policy is in a read-only state.
   • DThe user does not have the 'Import' permission assigned to their role.
   Reveal Solution Discussion Select an answer first