Objective 2.04 Refine Policy Structure for Policy Elements (e.g., URLs, Parameters, Files Types, Headers, Sessions and Logins, Content Profiles, CSRF Protection, Anomaly Protection) 303 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary purpose of CSRF protection in ASM?

   • ATo block SQL injection attacks
   • BTo prevent cross-site request forgery attacks by validating tokens
   • CTo manage user authentication sessions
   • DTo encrypt all HTTP traffic
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the primary purpose of configuring a URL policy element in an ASM policy?

   • ATo manage the SSL certificate for the virtual server
   • BTo define the allowed HTTP methods for the entire application
   • CTo control access and apply enforcement based on specific URL patterns
   • DTo set the maximum request body size for all requests
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In an ASM parameter policy, which attribute can be configured to restrict the length of a parameter's value?

   • AAllowed values
   • BData type
   • CParameter name
   • DMaximum length
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   When tuning anomaly protection settings, what is the primary trade-off an administrator must consider?

   • ABalancing CPU usage against memory usage
   • BBalancing SSL encryption strength against speed
   • CBalancing session timeout against user convenience
   • DBalancing false positives against security coverage
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In ASM, what is the purpose of a content profile?

   • ATo define the order of URL policy enforcement
   • BTo control the number of concurrent sessions
   • CTo manage SSL certificates for content encryption
   • DTo apply appropriate security checks for different content types and encodings
   Reveal Solution Discussion Select an answer first