A healthcare organization must ensure that all patient records transmitted between their data center and a remote clinic are encrypted in transit. They use F5 BIG-IP LTM for load balancing and need to enforce this requirement without changing the application. Which F5 control should they implement?

Apply both client SSL and server SSL profiles to the virtual server

Apply a client SSL profile to the virtual server

Enable the 'Enforce SSL' option in the HTTP profile

Configure an iRule to redirect HTTP traffic to HTTPS

A security team has implemented a WAF policy to block SQL injection attacks. They want to validate that the policy is effective without disrupting production traffic. Which approach should they use?

Send a known SQL injection payload to the production application

Enable the WAF in blocking mode and monitor for false positives

Run the WAF in transparent mode and review the logs

Review the WAF configuration to ensure it is correct

A company needs to ensure that only authenticated users can access an internal application. Which F5 control is most appropriate for this requirement?

Advanced Web Application Firewall (WAF)

A healthcare organization must ensure that patient data is not exposed to unauthorized users. They are using F5 BIG-IP ASM to protect their web application. Which ASM feature should they use to meet this requirement?

IP intelligence to block malicious IPs

Bot detection to block automated attacks

HTTP protocol compliance to block malformed requests

Data Guard to mask sensitive data in responses

After configuring an F5 WAF policy to block SQL injection attacks, what is the most direct way to validate that the control is effective?

Check that the WAF policy is saved

Send a test SQL injection payload and verify it is blocked

F5Certified Solution Expert, Security

Domain 2Objective 2

2.02 Determine the Correct Control to Address a Compliance or Business Requirement 401 Practice Questions (Page 2)

Part of the ARCHITECT SOLUTIONS domain, which makes up ~28% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~11–20 in this domain), expect 2–4 from this objective — we provide 20 practice questions to prepare you well beyond it. (estimate)

20questions here

4free pages

4concepts

Questions 6–10

6application · medium
A healthcare organization must ensure that all patient records transmitted between their data center and a remote clinic are encrypted in transit. They use F5 BIG-IP LTM for load balancing and need to enforce this requirement without changing the application. Which F5 control should they implement?
Select an answer first
7expert · hard
A security team has implemented a WAF policy to block SQL injection attacks. They want to validate that the policy is effective without disrupting production traffic. Which approach should they use?
Select an answer first
8foundation · easy
A company needs to ensure that only authenticated users can access an internal application. Which F5 control is most appropriate for this requirement?
Select an answer first
9application · medium
A healthcare organization must ensure that patient data is not exposed to unauthorized users. They are using F5 BIG-IP ASM to protect their web application. Which ASM feature should they use to meet this requirement?
Select an answer first
10foundation · easy
After configuring an F5 WAF policy to block SQL injection attacks, what is the most direct way to validate that the control is effective?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.