F5 F5 Certification F50-536 Questions & Answers

• Question 41:

  Which of the following statements are correct regarding positive and negative security models? (Choose 2)

  A. Positive security model allows all transactions by default.

  B. Negative security model denies all transactions by default.

  C. Negative security model allows all transactions by default and rejects only transactions that contain attacks.

  D. Positive security model denies all transactions by default and uses rules that allow only those transactions that are considered safe and valid.

  Correct Answer: CD

• Question 42:

  Which events are valid iRule events triggered by BIG-IP ASM processing? (Choose 2)

  A. ASM_REQUEST_BLOCKING

  B. ASM_REQUEST_ACCEPTED

  C. ASM_REQUEST_VIOLATION

  D. ASM_RESPONSE_BLOCKING

  Correct Answer: AC

• Question 43:

  Which of the following methods of protection is not available within the Protocol Security Manager for FTP protection?

  A. Session timeout

  B. Command length

  C. Allowed commands

  D. Anonymous FTP restriction

  Correct Answer: A

• Question 44:

  Logging profiles are assigned to?

  A. HTTP class

  B. Security policies

  C. Web applications

  D. Attack signatures

  Correct Answer: C

• Question 45:

  Which of the following is a language used for content provided by a web server to a web client?

  A. FTP

  B. TCP

  C. HTTP

  D. HTML

  Correct Answer: D

• Question 46:

  Which of the following methods are used by the BIG-IP ASM System to protect against SQL injections?

  A. HTTP RFC compliancy checks

  B. Meta-character enforcement and attack signatures

  C. HTTP RFC compliancy checks and length restrictions

  D. Response scrubbing, HTTP RFC compliancy checks, and meta-character enforcement

  Correct Answer: B

• Question 47:

  Which of the following can be associated with an XML profile?

  A. Flow

  B. Method

  C. Parameter

  D. File type

  Correct Answer: C

• Question 48:

  Which of the following are correct regarding Wildcard entities? (Choose 2)

  A. Wildcard entities are the basis for positive security logic.

  B. Wildcard entities are the basis for negative security logic.

  C. Wildcard entities require the need to learn only from violations.

  D. Wildcard entities can be applied to file types, URLs, cookies and parameters.

  Correct Answer: AD

• Question 49:

  Flow login allows for more granular protection of login and logout URLs within web applications. Which of the following are components of flow login? (Choose 3)

  A. Schema

  B. Login URLs

  C. Login pages

  D. Attack signatures

  E. Access validation

  Correct Answer: BCE

• Question 50:

  The BIG-IP ASM System is configured with a virtual server that contains an HTTP class profile and the protected pool members are associated within the HTTP class profile pool definition. The status of this virtual server is unknown (Blue). Which of the following conditions will make this virtual server become available (Green)?

  A. Assign a successful monitor to the virtual server

  B. Assign a successful monitor to the members of the HTTP class profile pool

  C. Associate a fallback host to the virtual server and assign a successful monitor to the fallback host

  D. Associate a default pool to the virtual server and assign a successful monitor to the pool members

  Correct Answer: D