Objective 2.04 Refine Policy Structure for Policy Elements (e.g., URLs, Parameters, Files Types, Headers, Sessions and Logins, Content Profiles, CSRF Protection, Anomaly Protection) 303 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A web application serves JSON responses to AJAX requests. The ASM policy is in blocking mode and is generating false positives because it is applying HTML content checks to the JSON responses. You need to ensure that JSON responses are checked appropriately without false positives. What should you configure?

   • AChange the content type to HTML in the response.
   • BDisable content checking for the URL.
   • CCreate a content profile for JSON and apply it to the URL.
   • DIncrease the anomaly detection threshold to ignore the false positives.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   In an ASM file type policy, which two properties are typically configured for a file type?

   • AFile extension and maximum upload size
   • BMIME type and file owner
   • CFile content and checksum
   • DFile name and creation date
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In ASM CSRF protection, what is the role of the 'Origin' header check?

   • ATo determine the content type of the request
   • BTo validate the SSL certificate of the client
   • CTo verify that the request originates from the same domain as the application
   • DTo check the user's browser version
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A web application has a form that submits a request to change a user's email address. The application uses CSRF tokens to protect against cross-site request forgery. However, the ASM policy is blocking legitimate requests because the token is not being recognized. You need to ensure that CSRF protection works without blocking legitimate requests. What should you configure?

   • AChange the form to use GET instead of POST.
   • BConfigure the CSRF token parameter in the ASM policy to match the application's token.
   • CDisable CSRF protection for the form URL.
   • DIncrease the anomaly detection threshold to allow the requests.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the purpose of anomaly protection in ASM?

   • ATo detect and block requests that deviate from normal traffic patterns
   • BTo manage SSL certificates
   • CTo provide load balancing
   • DTo encrypt data at rest
   Reveal Solution Discussion Select an answer first