3.03 Determine the Appropriate Settings to Mitigate Web Fraud 401 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company is concerned that their fraud mitigation policy is causing too many false positives, blocking legitimate users. They want to adjust the policy to be less aggressive while still catching obvious fraud. Which adjustment should they make?

   • ALower the anomaly detection threshold to catch more potential fraud.
   • BDisable the browser challenge and rely on IP reputation.
   • CRaise the anomaly detection threshold so that only more significant deviations trigger a challenge.
   • DApply the policy to all users equally without any risk scoring.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   An F5 BIG-IP administrator wants to share fraud-related data with an external fraud detection system to improve overall mitigation. Which integration method is commonly used?

   • AREST API
   • BSNMP trap
   • CSyslog forwarding
   • DICMP echo
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   An F5 BIG-IP administrator notices that implementing aggressive fraud mitigation settings has increased login time and user frustration. What should the administrator consider to balance security and usability?

   • ADisabling all fraud mitigation to improve user experience
   • BAdjusting the settings to apply stricter measures only to high-risk transactions
   • CIncreasing the frequency of CAPTCHA challenges for all users
   • DIgnoring user feedback to maintain maximum security
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   An F5 BIG-IP administrator wants to require additional authentication for users attempting high-risk transactions, such as wire transfers. Which policy configuration should be applied?

   • ACAPTCHA challenge
   • BStep-up authentication
   • CSession tracking
   • DBlocking rule
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A gaming company wants to prevent automated account creation while keeping the registration process smooth for real users. They have noticed that bots can easily solve simple CAPTCHAs. Which configuration should they implement?

   • AUse a browser challenge that executes JavaScript to detect headless browsers.
   • BRequire a CAPTCHA only after the user has completed the registration form.
   • CIncrease the CAPTCHA difficulty to the maximum level.
   • DBlock all registrations from IP addresses outside the company's country.
   Reveal Solution Discussion Select an answer first