3.02 Determine the Appropriate Protection Against Known Bad Actors 401 Practice Questions (Page 1)

Part of the OPERATION AND IMPLEMENTATION domain, which makes up ~38% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~15–27 in this domain), expect 2–4 from this objective — we provide 8 practice questions to prepare you well beyond it. (estimate)

8questions here

2free pages

3concepts

Questions 1–5

1foundation · easy
An F5 BIG-IP administrator wants to restrict the rate of requests from a specific source IP to prevent it from overwhelming a web server. Which F5 BIG-IP feature should be configured to enforce this rate limit?
Select an answer first
2foundation · easy
A web application is experiencing a high volume of requests from a small set of IP addresses that are not yet on any blacklist but are exhibiting aggressive behavior. Which protection mechanism would be most effective to mitigate this without permanently blocking the IPs?
Select an answer first
3foundation · easy
A security analyst observes a large number of distributed hosts simultaneously performing port scans across the organization's public IP range. According to known bad actor categories, how should these hosts be classified?
Select an answer first
4foundation · easy
An F5 BIG-IP administrator needs to block traffic from IP addresses that are known to be part of a botnet. Which F5 BIG-IP feature is specifically designed to use threat intelligence feeds to block traffic from known malicious IPs?
Select an answer first
5foundation · easy
An organization wants to block traffic from IP addresses that are known to be part of a botnet. Which protection mechanism is most appropriate for this purpose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.

3.02 Determine the Appropriate Protection Against Known Bad Actors 401 Practice Questions (Page 1)

Questions 1–5

An F5 BIG-IP administrator wants to restrict the rate of requests from a specific source IP to prevent it from overwhelming a web server. Which F5 BIG-IP feature should be configured to enforce this rate limit?

A web application is experiencing a high volume of requests from a small set of IP addresses that are not yet on any blacklist but are exhibiting aggressive behavior. Which protection mechanism would be most effective to mitigate this without permanently blocking the IPs?

A security analyst observes a large number of distributed hosts simultaneously performing port scans across the organization's public IP range. According to known bad actor categories, how should these hosts be classified?

An F5 BIG-IP administrator needs to block traffic from IP addresses that are known to be part of a botnet. Which F5 BIG-IP feature is specifically designed to use threat intelligence feeds to block traffic from known malicious IPs?

An organization wants to block traffic from IP addresses that are known to be part of a botnet. Which protection mechanism is most appropriate for this purpose?

Keep studying — OPERATION AND IMPLEMENTATION