A financial institution is required by PCI DSS to have a WAF in front of their customer-facing web application. The security team configured an ASM policy and needs to verify it meets the compliance requirement. Which action provides the most direct evidence of compliance?

Review the ASM policy to confirm it is enforced in blocking mode, and generate a report showing the policy is assigned to the virtual server.

Check the BIG-IP system uptime to ensure the device has been running without interruption.

Send a test SQL injection payload and confirm the ASM log shows a violation and the request was blocked.

Review the ASM learning suggestions to confirm the policy has been learning for at least 30 days.

What is the purpose of validating that a security configuration mitigates a specific vulnerability?

To confirm that the vulnerability is no longer exploitable

To assign a severity rating to the vulnerability

To document the vulnerability for future reference

To identify all vulnerabilities in the system

Which method is used to confirm that a security configuration change is actually applied and active on a BIG-IP system?

Reviewing the configuration via the TMOS Shell (tmsh) list command

Checking the system uptime to ensure the device has been recently rebooted

Reviewing the network diagram to confirm the intended topology

Restarting the BIG-IP services to ensure the configuration reloads

What is the primary purpose of reviewing logs and alerts after implementing a security configuration?

To confirm that the configuration is generating the expected security events

To calculate the total number of users in the system

To determine the optimal time for system backups

To identify the hardware vendor of the logging system

An administrator configured an iRule to block requests with a specific cookie value. The iRule is attached to the virtual server. The administrator sends a test request with the cookie value and the connection is reset. The administrator also sends a request without the cookie and it passes. Which additional test would provide the most complete functional verification?

Check the BIG-IP statistics to see if the connection count decreased after deployment.

Send a request with a different cookie value to confirm the iRule does not block it.

Verify the iRule is attached to the correct virtual server and the virtual server is enabled.

Review the iRule code to confirm the cookie value and the drop command are correct.

F5Certified Solution Expert, Security

Domain 3Objective 7

3.07 Verify a Configuration Is Functioning as Intended to Mitigate a Vulnerability 401 Practice Questions (Page 1)

Part of the OPERATION AND IMPLEMENTATION domain, which makes up ~38% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~15–27 in this domain), expect 2–4 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

6concepts

Questions 1–5

1application · medium
A financial institution is required by PCI DSS to have a WAF in front of their customer-facing web application. The security team configured an ASM policy and needs to verify it meets the compliance requirement. Which action provides the most direct evidence of compliance?
Select an answer first
2foundation · easy
What is the purpose of validating that a security configuration mitigates a specific vulnerability?
Select an answer first
3foundation · easy
Which method is used to confirm that a security configuration change is actually applied and active on a BIG-IP system?
Select an answer first
4foundation · easy
What is the primary purpose of reviewing logs and alerts after implementing a security configuration?
Select an answer first
5application · medium
An administrator configured an iRule to block requests with a specific cookie value. The iRule is attached to the virtual server. The administrator sends a test request with the cookie value and the connection is reset. The administrator also sends a request without the cookie and it passes. Which additional test would provide the most complete functional verification?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.