BIG-IP ASM v10.x (F50-536) Free Practice Test

Question 1

Which of the following is correct regarding User-defined Attack signatures?

A. User-defined signatures may only use regular expressions

B. User-defined signatures may not be applied globally within the entire policy

C. User-defined signatures use an F5-supplied syntax

D. Attack signatures may be grouped within system-supplied signatures

Correct Answer: C

Question 2

A user is building a security policy using the Deployment Wizard and the Rapid Deployment application template. By default, which settings will be applied to the security policy? (Choose 3)

A. The enforcement mode will be set to transparent.

B. Data Guard will be enabled.

C. The encoding language will be set to auto detect.

D. Wildcard tightening will be enabled on file types and parameters.

E. The Attack signature set applied will be Generic Detection Signatures.

Correct Answer: A,B,E

Question 3

An HTTP class is available

A. on any BIG-IP LTM system

B. only when ASM or WAare licensed.

C. only when ASM is licensed.

D. only when a specific license key is required.

Correct Answer: A

Question 4

Which of the following methods are used by the BIG-IP ASM System to protect against SQL injections?

A. Response scrubbing, HTTP RFC compliancy checks, and meta-character enforcement

B. HTTP RFC compliancy checks

C. HTTP RFC compliancy checks and length restrictions

D. Meta-character enforcement and attack signatures

Correct Answer: D

Question 5

When initially configuring the BIG-IP System using the config tool, which of the following parameters can be configured? (Choose 3)

A. Netmask of the management port

B. System hostname

C. Port lockdown of the management port

D. IP address of the management port

E. Default route of the management port

Correct Answer: A,D,E

Welcome to TestSimulate

F5 BIG-IP ASM v10.x (F50-536) Free Practice Test