Objective 4.03 Identify Key ASM Performance Metrics (e.g., CPU Report, Memory Report, Process Requests, Logging) 303 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · medium

   Which of the following best describes the purpose of the CPU report in ASM performance monitoring?

   • ATo display the version of the ASM software
   • BTo track the number of security policy violations
   • CTo list the active security policies
   • DTo measure the CPU utilization of the ASM processes
   Reveal Solution Discussion Select an answer first
2. 12foundation · medium

   How does enabling detailed logging on ASM typically affect system performance?

   • AIt reduces memory usage by freeing up buffers
   • BIt has no impact on system performance
   • CIt increases CPU and memory usage due to additional log processing
   • DIt decreases CPU usage because logging offloads work to the disk
   Reveal Solution Discussion Select an answer first
4. 13expert · medium

   An administrator is analyzing a performance degradation on a BIG-IP ASM system. The CPU report shows that the 'TMM' cores are at 80% utilization, but the 'ASM security processing' context is only at 10%. The memory report shows the 'Security Shared Memory' pool is at 90% utilization. Which conclusion is best supported by these metrics?

   • AThe system is memory-bound, and adding more memory will resolve the CPU issue
   • BThe bottleneck is likely outside ASM security processing, such as LTM traffic management or network I/O, while ASM memory pressure may be a secondary concern
   • CThe logging subsystem is consuming excessive CPU
   • DThe ASM policy is too complex and is causing the CPU spike
   Reveal Solution Discussion Select an answer first
5. 14expert · medium

   An administrator is comparing two BIG-IP ASM devices. Device A has high CPU utilization in the 'ASM security processing' context. Device B has low CPU in that context but high CPU in the 'ASM logging' context. Both devices have identical policies and traffic volumes. What is the most likely explanation for the difference?

   • ADevice B is configured to log more events per request than Device A, shifting CPU cost from security processing to logging
   • BDevice A is running an older version of the ASM software
   • CDevice B is not applying the ASM policy correctly
   • DDevice B has a more efficient CPU than Device A
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An ASM administrator is concerned about the performance impact of logging. The system is configured to log all requests to a remote syslog server. The administrator notices that the CPU report shows high utilization in the 'ASM logging' context. Which configuration change would most directly reduce the CPU cost associated with logging?

   • AReduce the logging profile to log only security violations instead of all requests
   • BIncrease the number of TMM cores allocated to the ASM module
   • CSwitch from remote syslog to local logging on the BIG-IP
   • DDisable the ASM policy enforcement to reduce the number of requests
   Reveal Solution Discussion Select an answer first