Objective 1.07 Explain the Differences Among Logging Levels (e.g., Performance Implications, Security Implications, Information Provided) 304 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is the primary performance impact of enabling debug logging on an APM policy?

   • ADecreased memory usage because debug logs are stored in memory.
   • BIncreased CPU usage due to formatting and writing more log messages.
   • CReduced disk I/O because debug logs are written to RAM.
   • DNo performance impact because logging is handled by a separate processor.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A financial services company is required to comply with PCI DSS. The APM administrator is configuring logging for a new access policy that handles credit card application submissions. The compliance team has mandated that cardholder data must not be stored in logs. What is the most effective approach to meet this requirement?

   • AConfigure APM logging to exclude sensitive variable values and use a remote syslog destination with restricted access
   • BDisable all APM logging and rely on the BIG-IP audit log for compliance evidence
   • CSet the APM log level to 'error' to minimize the amount of log data generated
   • DUse an iRule to redact cardholder data from log messages before they are written
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   In an APM log entry, what does the presence of an 'Access denied' message typically indicate?

   • AThe user's password was incorrect.
   • BThe user successfully completed all policy checks.
   • CThe APM policy was not configured.
   • DThe user was authenticated but did not meet all policy conditions.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An APM administrator is reviewing the following log entry from the /var/log/ltm log: `Apr 12 14:23:45 bigip1 notice apd[1234]: 01490567:4c: APM policy 'Corporate_Access' evaluated for session 0x5f2a1b3c: user 'jsmith' - authentication succeeded, access granted to pool 'corp_apps'` What is the most accurate interpretation of this log event?

   • AThe user 'jsmith' failed authentication and was denied access to the 'corp_apps' pool
   • BThe user 'jsmith' authenticated successfully but was denied access to the 'corp_apps' pool
   • CThe user 'jsmith' successfully authenticated and was granted access to the 'corp_apps' pool
   • DThe APM policy 'Corporate_Access' failed to evaluate and the session was terminated
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which TMOS component is responsible for recording administrative actions such as configuration changes and user logins to the BIG-IP system?

   • AAudit log
   • BSyslog server
   • CAPM access policy log
   • Dlocaldb
   Reveal Solution Discussion Select an answer first