A security team deployed an iRule to mitigate a brute-force attack by rate-limiting requests from a single source IP. After deployment, the team wants to verify the iRule is working. Which traffic analysis provides the most direct evidence?

Review the iRule code to confirm the rate limit threshold and the drop action are correctly specified.

Check the BIG-IP statistics to see if the total request count from all sources decreased after deployment.

Verify the iRule is attached to the virtual server and the virtual server is enabled.

Send a burst of requests from a single test IP and confirm that requests beyond the threshold are dropped or rejected.

What is the purpose of checking a configuration against security policies and compliance requirements?

To reduce the number of configuration files

To ensure the configuration aligns with mandated security standards

To document the configuration for the vendor

To improve the performance of the BIG-IP device

What is the purpose of functional testing of security controls?

To replace the need for regular security audits

To document the control's configuration for compliance

To assign a risk rating to the control

To verify that the control operates as expected in a live environment

An administrator configured an iRule to drop traffic from a specific source IP range that is known to be malicious. After deployment, the administrator wants to verify the iRule is working. Which method provides the most direct functional verification?

Check the virtual server's statistics to see if the total connection count decreased after deployment.

Review the iRule code to confirm the source IP range is correctly specified and the drop command is present.

Send a test request from an IP in the blocked range and confirm the connection is dropped, then send a request from an allowed IP and confirm it passes.

Verify the iRule is attached to the virtual server and the virtual server is enabled.

A company deployed an ASM policy to mitigate a specific CVE in their application. The security team wants to verify the mitigation is effective by analyzing production traffic. Which traffic analysis approach provides the most direct evidence?

Check the web server logs to see if any requests matching the CVE pattern reached the backend.

Search the ASM logs for requests matching the CVE's signature and confirm the action taken was 'blocked'.

Analyze the BIG-IP network traffic to see if any requests contain the CVE's exploit pattern.

Review the ASM policy to confirm the CVE's signature is enabled and the policy is in blocking mode.

F5Certified Solution Expert, Security

Domain 3Objective 7

3.07 Verify a Configuration Is Functioning as Intended to Mitigate a Vulnerability 401 Practice Questions (Page 2)

Part of the OPERATION AND IMPLEMENTATION domain, which makes up ~38% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~15–27 in this domain), expect 2–4 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

6concepts

Questions 6–10

6application · medium
A security team deployed an iRule to mitigate a brute-force attack by rate-limiting requests from a single source IP. After deployment, the team wants to verify the iRule is working. Which traffic analysis provides the most direct evidence?
Select an answer first
7foundation · easy
What is the purpose of checking a configuration against security policies and compliance requirements?
Select an answer first
8foundation · easy
What is the purpose of functional testing of security controls?
Select an answer first
9application · medium
An administrator configured an iRule to drop traffic from a specific source IP range that is known to be malicious. After deployment, the administrator wants to verify the iRule is working. Which method provides the most direct functional verification?
Select an answer first
10application · medium
A company deployed an ASM policy to mitigate a specific CVE in their application. The security team wants to verify the mitigation is effective by analyzing production traffic. Which traffic analysis approach provides the most direct evidence?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “401” is a trademark of its owner, used for identification only.