An ASM policy has been in enforcement mode for three months. The security admin is checking the 'Learning Score' and notices it has plateaued at 85%. The admin wants to ensure the policy is still adapting to the application's traffic. What should the admin do next?

Reset the learning score to zero to start fresh

Switch the policy back to 'Transparent' mode to force it to re-learn the traffic

Increase the learning speed setting to 'Fast'

Review the 'Learning Suggestions' report to see if there are any pending suggestions that have not been applied

The ASM is deployed on a BIG-IP device that also handles load balancing. The admin notices that the 'TMM CPU Usage' metric is consistently above 90%. Which action is most appropriate to address this performance issue?

Increase the logging level to 'Debug' to get more information

Disable the ASM for all virtual servers to reduce the load

Review the ASM policy for overly complex or inefficient rules that could be optimized

Reboot the BIG-IP device to clear the CPU usage

An ASM is deployed on a BIG-IP device that also handles SSL offloading. The admin notices that the 'TMM CPU Usage' is high, and the 'SSL TPS' (transactions per second) is also at its peak. The admin suspects the ASM is causing the high CPU. What is the most effective way to determine if the ASM is the bottleneck?

Increase the logging level to 'Debug' to get more detailed performance data

Review the 'Top Attack Signatures' report to see if there is an attack causing the load

Compare the 'TMM CPU Usage' with and without ASM enabled on a test virtual server

Check the 'Requests in Queue' metric on the ASM

An ASM policy has been in enforcement mode for six months. The 'Learning Score' is 100%, and there have been no new 'Learning Suggestions' for a month. The application team is about to deploy a significant update that changes the structure of several key URLs and parameters. What is the most important action the ASM admin should take to prepare for this update?

Reset the learning score to zero to force the policy to re-learn from scratch

Disable the ASM entirely during the update and re-enable it after

Keep the policy in 'Enforcement' mode and rely on the existing 100% learning score

Put the policy into 'Transparent' mode before the update to allow it to learn the new traffic patterns without blocking

F5Certified Technology Specialist, BIG-IP ASM (F5-CTS, BIG-IP ASM)

Domain 4Objective 5

Objective 4.05 Identify and Gather Information Relevant to Evaluating the Activity of an ASM Implementation 303 Practice Questions (Page 4)

Part of the Section 4: Administer and evaluate ASM implementation domain, which makes up ~42% of our current practice bank.

27questions here

6free pages

6concepts

Questions 16–20

16application · medium
An ASM policy has been in enforcement mode for three months. The security admin is checking the 'Learning Score' and notices it has plateaued at 85%. The admin wants to ensure the policy is still adapting to the application's traffic. What should the admin do next?
Select an answer first
17application · medium
The ASM is deployed on a BIG-IP device that also handles load balancing. The admin notices that the 'TMM CPU Usage' metric is consistently above 90%. Which action is most appropriate to address this performance issue?
Select an answer first
18expert · hard
An ASM is deployed on a BIG-IP device that also handles SSL offloading. The admin notices that the 'TMM CPU Usage' is high, and the 'SSL TPS' (transactions per second) is also at its peak. The admin suspects the ASM is causing the high CPU. What is the most effective way to determine if the ASM is the bottleneck?
Select an answer first
19expert · hard
An ASM policy has been in enforcement mode for six months. The 'Learning Score' is 100%, and there have been no new 'Learning Suggestions' for a month. The application team is about to deploy a significant update that changes the structure of several key URLs and parameters. What is the most important action the ASM admin should take to prepare for this update?
Select an answer first
20foundation · easy
Which ASM activity metric indicates the number of requests that triggered a security policy violation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 303

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “303” is a trademark of its owner, used for identification only.

Objective 4.05 Identify and Gather Information Relevant to Evaluating the Activity of an ASM Implementation 303 Practice Questions (Page 4)

Questions 16–20

An ASM policy has been in enforcement mode for three months. The security admin is checking the 'Learning Score' and notices it has plateaued at 85%. The admin wants to ensure the policy is still adapting to the application's traffic. What should the admin do next?

The ASM is deployed on a BIG-IP device that also handles load balancing. The admin notices that the 'TMM CPU Usage' metric is consistently above 90%. Which action is most appropriate to address this performance issue?

Which ASM activity metric indicates the number of requests that triggered a security policy violation?

Keep studying — Section 4: Administer and evaluate ASM implementation