2.03 Determine the Appropriate Security Framework for an Application 401 Practice Questions (Page 6)

Questions 26–29

1. 26foundation · easy

   When implementing a security framework that performs deep packet inspection on all incoming traffic, what is a primary performance consideration?

   • AThe framework may introduce latency due to the processing required for inspection
   • BThe framework will increase the application's throughput
   • CThe framework will require more bandwidth to operate
   • DThe framework will have no impact on application performance
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An e-commerce company runs a legacy application on a single server behind an F5 BIG-IP LTM. They want to add a WAF to protect against application-layer attacks. The BIG-IP is currently performing SSL termination and load balancing. The security team wants to minimize changes to the existing network topology and avoid introducing a new device. What is the most efficient approach?

   • AInstall a software WAF agent directly on the application server
   • BConfigure the BIG-IP to forward traffic to a cloud-based WAF service
   • CEnable the Application Security Manager (ASM) module on the existing BIG-IP LTM
   • DDeploy a separate hardware WAF appliance in front of the BIG-IP
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which architectural approach best aligns a security framework with a microservices-based application?

   • APlacing a single WAF at the edge of the network to protect all microservices
   • BImplementing security controls within each microservice and at the API gateway
   • CUsing a single monolithic security framework that inspects all traffic centrally
   • DDisabling security controls for internal microservices to reduce latency
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   An application is expected to experience a significant increase in traffic during a promotional event. What should be considered regarding the scalability of a security framework?

   • AThe security framework will automatically scale without any configuration
   • BThe security framework's performance is independent of traffic volume
   • CThe security framework should be disabled during the event to avoid performance issues
   • DThe security framework must be able to scale horizontally to handle increased traffic without becoming a bottleneck
   Reveal Solution Discussion Select an answer first