F5 F5 Certification F50-536 Questions & Answers

• Question 11:

  Which of the following storage type combinations are configurable in an ASM logging profile?

  A. Local and Syslog

  B. Local and Remote

  C. Remote and Syslog

  D. Remote and Reporting Server

  Correct Answer: B

• Question 12:

  Which of the following statements are incorrect regarding protection of web services? (Choose 2)

  A. The BIG-IP ASM System checks to ensure web services use cookies.

  B. The BIG-IP ASM System parses XML requests and XML responses.

  C. The BIG-IP ASM System checks to ensure XML documents are well formed.

  D. The BIG-IP ASM System uses attack signatures to enforce negative security logic.

  E. The BIG-IP ASM System checks for XML syntax, schema validation, and WSDL validation.

  Correct Answer: AB

• Question 13:

  Which of the following is correct regarding static parameters?

  A. A static parameter is stored in a frame cookie.

  B. A static parameter is pre-defined by the web application logic.

  C. A static parameter is learned only by using the Deployment Wizard.

  D. A static parameter is mapped once when creating the application flow model.

  Correct Answer: B

• Question 14:

  When configuring the BIG-IP ASM System in redundant pairs, which of the following are synchronized? (Choose 2)

  A. License file

  B. Security policies

  C. Web applications

  D. Request information

  E. Traffic learning information

  Correct Answer: BC

• Question 15:

  Sensitive parameters is a feature used to hide sensitive information from being displayed in which of the following?

  A. Client request

  B. Server response

  C. GUI and logs of BIG-IP ASM System

  D. Configuration file of BIG-IP ASM System

  Correct Answer: C

• Question 16:

  Tightening is a feature of which type of entity?

  A. Explicit URLs

  B. Attack signatures

  C. Flow login URLs

  D. Wildcard parameters

  Correct Answer: D

• Question 17:

  A client sends a request to a virtual server http://www.foo.com configured on the BIG-IP ASM System. The virtual server has an HTTP class profile associated with Application Security enabled, all class filters set to match all, and a pool consisting of foo.com members. The virtual server also has a default pool associated with it. When the client sends a request for http://www.foo.com, this traffic will be forwarded to which of the following?

  A. The fallback host

  B. The default pool

  C. The HTTP class profile pool

  D. The request will be dropped

  Correct Answer: C

• Question 18:

  Which of the following is correct concerning HTTP classes?

  A. A single web application can be used by several HTTP classes

  B. A virtual server can only have one web application associated with it

  C. A single ASM enabled HTTP class can be used by multiple virtual servers

  D. Each ASM enabled HTTP class can have several active security policies associated with it

  Correct Answer: C

• Question 19:

  Which of the following statements are correct regarding Attack signatures? (Choose 2)

  A. Attack signatures can apply to requests, responses, and parameters.

  B. Attack signatures are the basis for positive security logic with the BIG-IP ASM System.

  C. Any new Attack signature downloaded manually or automatically will be active and assigned directly to the security policy.

  D. Individual Attack signatures can be assigned to the security policy. Only Attack signature sets can apply to the security policy.Individual Attack signatures can? be assigned to the security policy. Only Attack signature sets can apply to the security policy.

  Correct Answer: AD

• Question 20:

  Which of the following is not a feature of a standalone BIG-IP ASM System?

  A. Attack signatures

  B. Multiple pool members

  C. Positive security model

  D. Real-time traffic policy builder

  E. Pre-defined security policy templates

  Correct Answer: B