3.03 Determine the Appropriate Settings to Mitigate Web Fraud 401 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A financial services company is deploying BIG-IP to protect its online banking portal. They want to identify and track returning users without requiring them to log in again, but they are concerned about the impact on user experience for legitimate customers. Which configuration should they implement?

   • AEnable device fingerprinting and use the resulting fingerprint as a persistent session identifier.
   • BSet the access policy to require step-up authentication for all returning users.
   • CConfigure a browser challenge that presents a CAPTCHA to every returning user.
   • DEnable session tracking using only the source IP address.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A bank uses an external fraud detection service that provides real-time risk scores. They want BIG-IP to use these scores to enforce step-up authentication for high-risk sessions. Which integration method should they configure?

   • AUse the external service's SDK to replace BIG-IP's access policy.
   • BManually review the external service's reports and update the access policy daily.
   • CUse an iRule to call the external service's API and evaluate the returned risk score in the access policy.
   • DConfigure the external service to send all traffic to BIG-IP for inspection.
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A company is experiencing a sophisticated fraud campaign that uses distributed IP addresses and frequently changes device fingerprints. They have an external fraud intelligence feed. Which strategy should they use to detect this campaign?

   • AIntegrate the fraud intelligence feed and use behavioral analysis to detect patterns across sessions.
   • BBlock all IP addresses on the fraud intelligence feed.
   • CUse a CAPTCHA challenge for all users.
   • DRely solely on device fingerprinting to block new devices.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A company's BIG-IP access policy currently presents a CAPTCHA to all users during high-risk transactions. Legitimate users are complaining about the friction. The security team wants to maintain fraud protection while reducing the impact on trusted users. Which approach should they take?

   • AIncrease the CAPTCHA difficulty to ensure only humans can pass.
   • BUse device fingerprinting to create a trusted device list and skip the CAPTCHA for those devices.
   • CRemove the CAPTCHA entirely and rely on network-level blocking.
   • DApply the CAPTCHA only to users accessing from new IP addresses.
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company is deploying BIG-IP fraud mitigation and must balance security with user experience. They have a high volume of legitimate users and a small number of sophisticated attackers. They want to minimize false positives while still detecting advanced fraud. Which combination of settings should they use?

   • AUse device fingerprinting to block all new devices.
   • BUse IP reputation and block all high-risk IPs.
   • CUse a low anomaly threshold and CAPTCHA challenges for all users.
   • DUse behavioral analysis with a high anomaly threshold and device fingerprinting to build a trusted device list.
   Reveal Solution Discussion Select an answer first