F5 F5 Certification F50-536 Questions & Answers

• Question 31:

  Which of the following methods of protection operates on server responses?

  A. Dynamic parameter protection

  B. Response code validation and response scrubbing

  C. Response code validation and HTTP method validation

  D. HTTP RFC compliancy check and meta-character enforcement

  Correct Answer: B

• Question 32:

  Which of the following is not a configurable parameter data type?

  A. Email

  B. Array

  C. Binary

  D. Decimal

  Correct Answer: B

• Question 33:

  When we have a * wildcard entity configured in the File Type section with tightening enabled, the following may occur when requests are passed through the policy. Which is the most accurate statement?

  A. File type violations will not be triggered.

  B. File type violations will be triggered and learning will be available based on these violations.

  C. File type entities will automatically be added to the policy (policy will tighten).

  D. File type violations will not be triggered and the entity learning section will be populated with file type recommendations.

  Correct Answer: B

• Question 34:

  Which of the following does not pertain to protecting the Requested Resource (URI) element?

  A. File type validation

  B. URL name validation

  C. Domain cookie validation

  D. Attack signature validation

  Correct Answer: C

• Question 35:

  Which of the following protocol protections is not provided by the Protocol Security Manager?

  A. FTP

  B. SSH

  C. HTTP

  D. SMTP

  Correct Answer: B

• Question 36:

  Which of the following is correct regarding User-defined Attack signatures?

  A. User-defined signatures use an F5-supplied syntax

  B. User-defined signatures may only use regular expressions

  C. Attack signatures may be grouped within system-supplied signatures

  D. User-defined signatures may not be applied globally within the entire policy

  Correct Answer: A

• Question 37:

  Which of the following methods of protection is not available within the Protocol Security Manager for HTTP traffic?

  A. Data guard

  B. Attack signatures

  C. Evasion techniques

  D. File type enforcement

  Correct Answer: B

• Question 38:

  There are many user roles configurable on the BIG-IP ASM System. Which of the following user roles have access to make changes to ASM policies? (Choose 3)

  A. Guest

  B. Operator

  C. Administrator

  D. Web Application Security Editor

  E. Web Application Security Administrator

  Correct Answer: CDE

• Question 39:

  In the following configuration, a virtual server has the following HTTP class configuration:

  HTTP Class 1 = Host pattern www.f5.com

  HTTP Class 2 = No filters

  A request arriving for WWW.F5.COM will be matched by which class(es)?

  A. Class 1

  B. Class 2

  C. Both Class 1 and Class 2

  D. The request will be dropped

  Correct Answer: B

• Question 40:

  Learning suggestions in the Policy Building pages allow for which of the following? (Choose 2)

  A. XML-based parameters and associated schema are automatically learned.

  B. Blocking response pages can be automatically generated from web site content.

  C. Flow level parameters are displayed when found and can be accepted into the current policy.

  D. The administrator may modify whether the BIG-IP ASM System will learn, alarm, or block detected violations.

  E. Maximum acceptable values for length violations are calculated and can be accepted into the security policy by the administrator.

  Correct Answer: CE