2.01 Determine the Correct Solution to Mitigate a Given Threat 401 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A security analyst notices a large number of HTTP requests to a login page, each with a different username and password combination. The requests originate from a small number of IP addresses and are spaced a few seconds apart. The application is protected by BIG-IP LTM. Which type of threat is this, and which F5 solution should be used to mitigate it?

   • ADDoS attack; use BIG-IP AFM with a rate limit policy
   • BSQL injection attack; use BIG-IP ASM with an SQL injection signature set
   • CBrute force attack; use BIG-IP LTM with a connection rate limit
   • DCredential stuffing attack; use BIG-IP ASM with a login protection profile
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   An organization plans to deploy a WAF in front of its existing web servers. Which consideration is most important to ensure the WAF does not introduce unacceptable latency for legitimate users?

   • AThe number of web servers behind the WAF
   • BThe performance impact of the WAF
   • CThe color of the rack-mounted hardware
   • DThe brand of the web server software
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A large e-commerce company expects a significant increase in traffic during an upcoming sales event. The security team is concerned about a potential DDoS attack targeting the website. They need a mitigation strategy that can absorb large volumetric attacks without impacting the performance of legitimate transactions. The company currently uses BIG-IP LTM for load balancing and has a hybrid cloud infrastructure. Which approach should be recommended?

   • AConfigure BIG-IP ASM to block all traffic from countries where the company does not do business
   • BDeploy BIG-IP AFM on the existing LTM devices and enable SYN cookie protection
   • CImplement a cloud-based DDoS protection service in front of the BIG-IP LTM devices
   • DIncrease the number of BIG-IP LTM devices and use round-robin load balancing
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   A security analyst observes a flood of UDP packets targeting a single server port, consuming all available network bandwidth. Which category of threat does this scenario best represent?

   • ADistributed denial-of-service (DDoS) attack
   • BNetwork intrusion
   • CApplication-layer attack
   • DMan-in-the-middle attack
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A financial services company is experiencing intermittent availability issues with its customer-facing web application. Analysis of traffic logs shows a high volume of SYN packets from a distributed set of IP addresses, with no corresponding ACK responses. The application remains responsive to legitimate users, but the load balancer is consuming significant CPU resources processing the incomplete connections. Which F5 solution should be used to mitigate this threat?

   • AEnable TCP multiplexing on the BIG-IP LTM profile
   • BConfigure BIG-IP ASM to block IP addresses that send more than 10 SYN packets per second
   • CEnable SYN cookie protection on the BIG-IP LTM virtual server
   • DDeploy BIG-IP AFM with a DNS query rate limit
   Reveal Solution Discussion Select an answer first