F50-536 Real Exam Questions and Verified Answers

Question 1 Single choice

Tightening is a feature of which type of entity?

A
Explicit URLs
B
Attack signatures
C
Flow login URLs
D
Wildcard parameters

Show answer and explanation

Correct answer: D

Question 2 Multiple choice

A request is sent to the BIG-IP ASM System that generates a Length error violation.

Which of the following length types provides a valid learning suggestion? (Choose 3)

A
URL
B
Cookie
C
Response
D
POST data
E
Query string

Show answer and explanation

Correct answers: A, D, E

Question 3 Multiple choice

Which of the following statements are incorrect regarding protection of web services? (Choose 2)

A
The BIG-IP ASM System checks to ensure web services use cookies.
B
The BIG-IP ASM System parses XML requests and XML responses.
C
The BIG-IP ASM System checks to ensure XML documents are well formed.
D
The BIG-IP ASM System uses attack signatures to enforce negative security logic.
E
The BIG-IP ASM System checks for XML syntax, schema validation, and WSDL validation.

Show answer and explanation

Correct answers: A, B

Question 4 Single choice

Which of the following is correct regarding static parameters?

A
A static parameter is stored in a frame cookie.
B
A static parameter is pre-defined by the web application logic.
C
A static parameter is learned only by using the Deployment Wizard.
D
A static parameter is mapped once when creating the application flow model.

Show answer and explanation

Correct answer: B

Question 5 Multiple choice

Learning suggestions in the Policy Building pages allow for which of the following? (Choose 2)

A
XML-based parameters and associated schema are automatically learned.
B
Blocking response pages can be automatically generated from web site content.
C
Flow level parameters are displayed when found and can be accepted into the current policy.
D
The administrator may modify whether the BIG-IP ASM System will learn, alarm, or block detected violations.
E
Maximum acceptable values for length violations are calculated and can be accepted into the security policy by the administrator.

Show answer and explanation

Correct answers: C, E

Question 6 Single choice

Which of the following does not pertain to protecting the Requested Resource (URI) element?

A
File type validation
B
URL name validation
C
Domain cookie validation
D
Attack signature validation

Show answer and explanation

Correct answer: C

Question 7 Multiple choice

When configuring the BIG-IP ASM System in redundant pairs, which of the following are synchronized? (Choose 2)

A
License file
B
Security policies
C
Web applications
D
Request information
E
Traffic learning information

Show answer and explanation

Correct answers: B, C

Question 8 Single choice

In the following configuration, a virtual server has the following HTTP class configuration: HTTP Class 1 = Host pattern www.f5.com HTTP Class 2 = No filters A request arriving for WWW.F5.
COM will be matched by which class(es)?

A
Class 1
B
Class 2
C
Both Class 1 and Class 2
D
The request will be dropped

Show answer and explanation

Correct answer: B

Question 9 Single choice

Which level of parameter assumes the highest precedence in BIG-IP ASM System processing logic?

A
Flow
B
Object
C
Global
D
URL

Show answer and explanation

Correct answer: A

Question 10 Single choice

There are multiple HTTP class profiles assigned to a virtual server. Each profile has Application Security enabled.

Which statement is true?

A
Traffic will process through every HTTP class profile every time.
B
Traffic will process through the first HTTP class profile that it matches and then stops.
C
Traffic will process through one HTTP class profile and if the traffic matches another profile, BIG-IP
System will send a redirect to the client.
D
Traffic will only process through the HTTP class profile that it matches but always processes through the whole list and will process through each HTTP class profile it matches.

Show answer and explanation

Correct answer: B