A company is experiencing a slow but steady increase in network traffic that is consuming bandwidth and causing performance degradation. Analysis shows that the traffic is a mix of UDP and ICMP packets from many different source IP addresses. The company uses BIG-IP LTM for load balancing. Which F5 solution should be used to mitigate this threat?

Configure LTM to drop all UDP and ICMP traffic

Use iRules on LTM to rate-limit UDP and ICMP traffic

Deploy BIG-IP AFM with a rate limit on UDP and ICMP traffic

Enable the ASM module to inspect UDP and ICMP packets

When designing a mitigation strategy for a DDoS attack, which factor is most important to consider to ensure the solution can handle a large-scale attack without becoming a bottleneck?

The number of administrators assigned

The scalability of the mitigation solution

The color scheme of the management interface

The number of security policies configured

After deploying a new WAF policy, a security team wants to confirm that legitimate traffic is not being blocked. Which testing method is most appropriate for this validation?

Review the WAF configuration without testing

Send a mix of benign and attack traffic to the WAF and verify that only the attack traffic is blocked

Only send attack traffic to the WAF

Disable the WAF and monitor for attacks

F5Certified Solution Expert, Security

Domain 2Objective 1

2.01 Determine the Correct Solution to Mitigate a Given Threat 401 Practice Questions (Page 1)

Part of the ARCHITECT SOLUTIONS domain, which makes up ~28% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~11–20 in this domain), expect 2–4 from this objective — we provide 15 practice questions to prepare you well beyond it. (estimate)

15questions here

3free pages

4concepts

Questions 1–5

1foundation · easy
A company wants to block malicious IP addresses at the network perimeter and protect against volumetric DDoS attacks. Which F5 solution is most appropriate for this requirement?
Select an answer first
2foundation · easy
An organization needs to protect its web applications from SQL injection and cross-site scripting attacks. Which F5 solution is specifically designed to address these threats?
Select an answer first
3application · medium
A company is experiencing a slow but steady increase in network traffic that is consuming bandwidth and causing performance degradation. Analysis shows that the traffic is a mix of UDP and ICMP packets from many different source IP addresses. The company uses BIG-IP LTM for load balancing. Which F5 solution should be used to mitigate this threat?
Select an answer first
4foundation · easy
When designing a mitigation strategy for a DDoS attack, which factor is most important to consider to ensure the solution can handle a large-scale attack without becoming a bottleneck?
Select an answer first
5foundation · easy
After deploying a new WAF policy, a security team wants to confirm that legitimate traffic is not being blocked. Which testing method is most appropriate for this validation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.

2.01 Determine the Correct Solution to Mitigate a Given Threat 401 Practice Questions (Page 1)

Questions 1–5

A company wants to block malicious IP addresses at the network perimeter and protect against volumetric DDoS attacks. Which F5 solution is most appropriate for this requirement?

An organization needs to protect its web applications from SQL injection and cross-site scripting attacks. Which F5 solution is specifically designed to address these threats?

When designing a mitigation strategy for a DDoS attack, which factor is most important to consider to ensure the solution can handle a large-scale attack without becoming a bottleneck?

After deploying a new WAF policy, a security team wants to confirm that legitimate traffic is not being blocked. Which testing method is most appropriate for this validation?

Keep studying — ARCHITECT SOLUTIONS