Objective 1.07 Explain the Differences Among Logging Levels (e.g., Performance Implications, Security Implications, Information Provided) 304 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An organization runs a high-volume APM deployment on a BIG-IP device that is already at 70% CPU utilization during peak hours. The administrator needs to enable additional logging to investigate a reported issue. Which logging change will have the LEAST impact on the device's performance?

   • AChange the APM log level from 'notice' to 'debug' for the production virtual server
   • BEnable 'info' level logging for the production virtual server
   • CAdd a remote syslog destination for the existing 'notice' level logs
   • DKeep the current log level and add a logging profile that captures only the specific session IDs under investigation
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An administrator is investigating a report that a user was able to access an application they should not have been able to reach. The administrator reviews the APM log and finds the following entry: `Apr 12 14:23:45 bigip1 notice apd[1234]: 01490567:4c: APM policy 'Corporate_Access' evaluated for session 0x5f2a1b3c: user 'jsmith' - authentication succeeded, access granted to pool 'restricted_apps'` What should the administrator conclude from this log entry?

   • AThe user's authentication failed, so the access grant is invalid
   • BThe user was correctly granted access because authentication succeeded
   • CThe user was granted access to the restricted pool, indicating a possible policy misconfiguration
   • DThe log entry is incomplete and cannot be used to determine the access decision
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which APM logging level provides the most detailed information about policy execution, including variable values and branch decisions?

   • AInfo
   • BError
   • CWarning
   • DDebug
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is a primary security risk of enabling debug logging on an APM policy?

   • AIncreased risk of denial-of-service attacks due to higher CPU usage.
   • BLoss of log data due to disk overflow.
   • CExposure of sensitive data such as passwords or personal information in log files.
   • DUnauthorized access to the BIG-IP management interface.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company is deploying a new APM policy and wants to verify that the policy logic is working correctly before going live. The administrator needs to see detailed information about which branches of the policy are being taken for test users. However, the production BIG-IP device is also handling live traffic and must not be degraded. What is the best approach?

   • AEnable debug logging on the production virtual server for a short period during the test
   • BDeploy the policy to a staging BIG-IP device and enable debug logging there
   • CUse the 'info' log level on the production virtual server and review the logs after the test
   • DEnable error-level logging on the production virtual server and check for errors during the test
   Reveal Solution Discussion Select an answer first