F5 F50-536 Online Practice Questions and Exam Preparation

F5 F50-536 Online Questions & Answers

• Question 1:

  Tightening is a feature of which type of entity?

  A. Explicit URLs
  B. Attack signatures
  C. Flow login URLs
  D. Wildcard parameters
  D. Wildcard parameters

• Question 2:

  Which of the following is correct concerning HTTP classes?

  A. A single web application can be used by several HTTP classes
  B. A virtual server can only have one web application associated with it
  C. A single ASM enabled HTTP class can be used by multiple virtual servers
  D. Each ASM enabled HTTP class can have several active security policies associated with it
  C. A single ASM enabled HTTP class can be used by multiple virtual servers

• Question 3:

  Which of the following methods of protection are used by the BIG-IP ASM System to mitigate buffer overflow attacks?

  A. HTTP RFC compliancy checks
  B. Length restrictions and attack signatures
  C. Length restrictions and site cookie compliancy checks
  D. Meta-character enforcement and HTTP RFC compliancy check
  B. Length restrictions and attack signatures

• Question 4:

  Which of the following mitigation techniques is based on anomaly detection? (Choose 2)

  A. Brute force attack prevention
  B. Cross-site request forgery prevention
  C. Web scraping attack prevention
  D. Parameter tampering prevention
  A. Brute force attack prevention
  C. Web scraping attack prevention

• Question 5:

  When building a policy based on live traffic using the automated policy builder, which of the following elements will not be taken into account when analyzing the traffic?

  A. The size of the response
  B. The requested resource (URI)
  C. The response code from the web server
  D. The parameter values of static based parameters
  A. The size of the response

• Question 6:

  Which of the following methods of protection is not available within the Protocol Security Manager for FTP protection?

  A. Session timeout
  B. Command length
  C. Allowed commands
  D. Anonymous FTP restriction
  A. Session timeout

• Question 7:

  Which of the following are correct regarding Wildcard entities? (Choose 2)

  A. Wildcard entities are the basis for positive security logic.
  B. Wildcard entities are the basis for negative security logic.
  C. Wildcard entities require the need to learn only from violations.
  D. Wildcard entities can be applied to file types, URLs, cookies and parameters.
  A. Wildcard entities are the basis for positive security logic.
  D. Wildcard entities can be applied to file types, URLs, cookies and parameters.

• Question 8:

  A client sends a request to a virtual server http://www.foo.com configured on the BIG-IP ASM System. The virtual server has an HTTP class profile associated with Application Security enabled, all class filters set to match all, and a pool consisting of foo.com members. The virtual server also has a default pool associated with it. When the client sends a request for http://www.foo.com, this traffic will be forwarded to which of the following?

  A. The fallback host
  B. The default pool
  C. The HTTP class profile pool
  D. The request will be dropped
  C. The HTTP class profile pool

• Question 9:

  Which of the following methods of protection is not available within the Protocol Security Manager for HTTP traffic?

  A. Data guard
  B. Attack signatures
  C. Evasion techniques
  D. File type enforcement
  B. Attack signatures

• Question 10:

  Sensitive parameters is a feature used to hide sensitive information from being displayed in which of the following?

  A. Client request
  B. Server response
  C. GUI and logs of BIG-IP ASM System
  D. Configuration file of BIG-IP ASM System
  C. GUI and logs of BIG-IP ASM System