A security engineer has implemented a WAF policy to block SQL injection. After a week, they notice that some legitimate requests are being blocked. They need to validate the policy and reduce false positives. Which action should they take first?

Increase the WAF's sensitivity to block more attacks

Review the WAF logs to identify the blocked legitimate requests and adjust the policy accordingly

Disable the WAF policy immediately to restore service

Switch the WAF to transparent mode to stop blocking

A company is subject to PCI DSS and must protect cardholder data. They are using F5 BIG-IP to terminate SSL and forward traffic to their web servers. Which control should they implement to ensure that cardholder data is encrypted in transit from the BIG-IP to the web server?

Apply a server SSL profile to the virtual server

Enable the BIG-IP system's audit log

Apply a client SSL profile to the virtual server

Use an iRule to redirect HTTP to HTTPS

An administrator configured APM to require multi-factor authentication (MFA) for VPN access. What is the best way to validate that this control meets the business requirement?

Verify the APM license is active

Check the APM configuration is backed up

Review the APM access policy logs

Attempt a VPN login without MFA and confirm it is denied

A company is required by a new data protection regulation to log all access to customer data. They use F5 BIG-IP to load balance their application. Which control should they implement to meet this requirement?

Enable the BIG-IP system's audit log

Enable logging on the virtual server

Configure an iRule to log requests that access customer data

Use BIG-IP ASM to log security events

A company needs to provide secure remote access to internal applications for employees working from home. They want to enforce multi-factor authentication and device posture checks before granting access. Which F5 solution should they use?

BIG-IP DNS to resolve internal hostnames

BIG-IP LTM with client SSL profiles

BIG-IP ASM with a security policy

BIG-IP APM with an Access Policy

F5Certified Solution Expert, Security

Domain 2Objective 2

2.02 Determine the Correct Control to Address a Compliance or Business Requirement 401 Practice Questions (Page 1)

Part of the ARCHITECT SOLUTIONS domain, which makes up ~28% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~11–20 in this domain), expect 2–4 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

4concepts

Questions 1–5

1expert · hard
A security engineer has implemented a WAF policy to block SQL injection. After a week, they notice that some legitimate requests are being blocked. They need to validate the policy and reduce false positives. Which action should they take first?
Select an answer first
2application · medium
A company is subject to PCI DSS and must protect cardholder data. They are using F5 BIG-IP to terminate SSL and forward traffic to their web servers. Which control should they implement to ensure that cardholder data is encrypted in transit from the BIG-IP to the web server?
Select an answer first
3foundation · easy
An administrator configured APM to require multi-factor authentication (MFA) for VPN access. What is the best way to validate that this control meets the business requirement?
Select an answer first
4application · medium
A company is required by a new data protection regulation to log all access to customer data. They use F5 BIG-IP to load balance their application. Which control should they implement to meet this requirement?
Select an answer first
5application · easy
A company needs to provide secure remote access to internal applications for employees working from home. They want to enforce multi-factor authentication and device posture checks before granting access. Which F5 solution should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.