A security architect is selecting a security framework for a new customer-facing web application that will handle payment card data. Which combination of factors should most directly influence the framework selection?

The application's programming language and the developer team's preferred IDE

The application type, expected traffic patterns, and applicable compliance requirements

The geographic location of the development team and their time zone

The company's marketing budget and the number of developers on the team

A company is deploying a new application that will be accessed by a large number of users during peak hours. The application is critical and cannot tolerate downtime. The security team is evaluating two WAF solutions: (1) an on-premises F5 BIG-IP with ASM, and (2) a cloud-based WAF service. The company has a dedicated team to manage the on-premises infrastructure. Which solution is more appropriate for ensuring high availability and scalability?

A hybrid approach with both on-premises and cloud WAF

A media streaming company is launching a new public website that will experience unpredictable spikes in traffic during live events. The site serves static content (images, videos) and has a small API for user comments. The security team wants to protect against DDoS attacks and web application attacks without adding significant latency to content delivery. Which security framework should be prioritized?

A CDN with built-in DDoS protection and a WAF for the API endpoints

A network firewall with deep packet inspection

An on-premises WAF appliance for all traffic

A security framework is being integrated into an environment that uses a reverse proxy for web traffic. What is a primary benefit of this integration?

It requires the application to be rewritten to use the proxy

It eliminates the need for any other security controls

It allows the security framework to inspect and filter traffic before it reaches the application servers

It only works with on-premises infrastructure

In a security framework architecture, what is the purpose of placing a WAF in front of the application servers?

To authenticate users before they access the application

To encrypt all traffic between the WAF and the application servers

To filter malicious traffic before it reaches the application

To balance the load between multiple application servers

F5Certified Solution Expert, Security

Domain 2Objective 3

2.03 Determine the Appropriate Security Framework for an Application 401 Practice Questions (Page 2)

Part of the ARCHITECT SOLUTIONS domain, which makes up ~28% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~11–20 in this domain), expect 2–4 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

Questions 6–10

6foundation · easy
A security architect is selecting a security framework for a new customer-facing web application that will handle payment card data. Which combination of factors should most directly influence the framework selection?
Select an answer first
7expert · hard
A company is deploying a new application that will be accessed by a large number of users during peak hours. The application is critical and cannot tolerate downtime. The security team is evaluating two WAF solutions: (1) an on-premises F5 BIG-IP with ASM, and (2) a cloud-based WAF service. The company has a dedicated team to manage the on-premises infrastructure. Which solution is more appropriate for ensuring high availability and scalability?
Select an answer first
8application · medium
A media streaming company is launching a new public website that will experience unpredictable spikes in traffic during live events. The site serves static content (images, videos) and has a small API for user comments. The security team wants to protect against DDoS attacks and web application attacks without adding significant latency to content delivery. Which security framework should be prioritized?
Select an answer first
9foundation · easy
A security framework is being integrated into an environment that uses a reverse proxy for web traffic. What is a primary benefit of this integration?
Select an answer first
10foundation · easy
In a security framework architecture, what is the purpose of placing a WAF in front of the application servers?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.

2.03 Determine the Appropriate Security Framework for an Application 401 Practice Questions (Page 2)

Questions 6–10

A security architect is selecting a security framework for a new customer-facing web application that will handle payment card data. Which combination of factors should most directly influence the framework selection?

A security framework is being integrated into an environment that uses a reverse proxy for web traffic. What is a primary benefit of this integration?

In a security framework architecture, what is the purpose of placing a WAF in front of the application servers?

Keep studying — ARCHITECT SOLUTIONS