After a major application release, the security team notices a sharp increase in 'Violations' but no corresponding increase in 'Blocked Requests'. The team wants to understand if the new release is causing false positives or if there is a new attack pattern. Which metric, when compared to the violation count, would be most helpful in making this distinction?

The 'Learning Score' metric, to see if the policy is still learning the new application behavior

The 'Requests' metric, to see if the increase in violations is proportional to an increase in traffic

The 'System CPU' metric, to see if the ASM is overloaded

The 'Top URLs' metric, to see which endpoints are being targeted

When evaluating policy violations, which factor is most important for determining the impact of an attack?

The source IP address of the request

The user-agent string of the request

The time of day the violation occurred

F5Certified Technology Specialist, BIG-IP ASM (F5-CTS, BIG-IP ASM)

Domain 4Objective 5

Objective 4.05 Identify and Gather Information Relevant to Evaluating the Activity of an ASM Implementation 303 Practice Questions (Page 3)

Part of the Section 4: Administer and evaluate ASM implementation domain, which makes up ~42% of our current practice bank.

27questions here

6free pages

6concepts

Questions 11–15

11foundation · easy
Which metric is used to evaluate the frequency of attacks by counting how often a specific violation occurs?
Select an answer first
12foundation · easy
Which ASM log provides detailed information about security events, including the request, the violation type, and the action taken by the policy?
Select an answer first
13application · medium
After a major application release, the security team notices a sharp increase in 'Violations' but no corresponding increase in 'Blocked Requests'. The team wants to understand if the new release is causing false positives or if there is a new attack pattern. Which metric, when compared to the violation count, would be most helpful in making this distinction?
Select an answer first
14foundation · easy
Which metric is used to evaluate the activity of an ASM implementation by indicating the total number of requests that were processed by the security policy?
Select an answer first
15foundation · easy
When evaluating policy violations, which factor is most important for determining the impact of an attack?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 303

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “303” is a trademark of its owner, used for identification only.

Objective 4.05 Identify and Gather Information Relevant to Evaluating the Activity of an ASM Implementation 303 Practice Questions (Page 3)

Questions 11–15

Which metric is used to evaluate the frequency of attacks by counting how often a specific violation occurs?

Which ASM log provides detailed information about security events, including the request, the violation type, and the action taken by the policy?

Which metric is used to evaluate the activity of an ASM implementation by indicating the total number of requests that were processed by the security policy?

When evaluating policy violations, which factor is most important for determining the impact of an attack?

Keep studying — Section 4: Administer and evaluate ASM implementation