F5 F5 Certification F50-536 Questions & Answers

• Question 1:

  When building a policy based on live traffic using the automated policy builder, which of the following elements will not be taken into account when analyzing the traffic?

  A. The size of the response

  B. The requested resource (URI)

  C. The response code from the web server

  D. The parameter values of static based parameters

  Correct Answer: A

• Question 2:

  A user is building a security policy using the Deployment Wizard and the Rapid Deployment application template. By default, which settings will be applied to the security policy? (Choose 3)

  A. Data Guard will be enabled.

  B. The enforcement mode will be set to transparent.

  C. The encoding language will be set to auto detect.

  D. Wildcard tightening will be enabled on file types and parameters.

  E. The Attack signature set applied will be Generic Detection Signatures.

  Correct Answer: ABE

• Question 3:

  Which method of protection is not provided by the Rapid Deployment policy template?

  A. Data leakage

  B. Buffer overflow

  C. HTTP protocol compliance

  D. Dynamic parameter validation

  Correct Answer: D

• Question 4:

  Which of the following are properties of an ASM logging profile? (Choose 2)

  A. storage type

  B. storage filter

  C. storage policy

  D. web application

  Correct Answer: AB

• Question 5:

  Which of the following methods of protection are used by the BIG-IP ASM System to mitigate buffer overflow attacks?

  A. HTTP RFC compliancy checks

  B. Length restrictions and attack signatures

  C. Length restrictions and site cookie compliancy checks

  D. Meta-character enforcement and HTTP RFC compliancy check

  Correct Answer: B

• Question 6:

  Which HTTP response code ranges indicate an error condition? (Choose 2)

  A. 1xx

  B. 2xx

  C. 3xx

  D. 4xx

  E. 5xx

  Correct Answer: DE

• Question 7:

  The Web Application Security Administrator user role can perform which of the following functions? (Choose 2)

  A. Modify HTTP class profiles

  B. Create new HTTP class profiles

  C. Create new Attack signature sets

  D. Assign HTTP class profiles to virtual servers

  E. Configure Advanced options within the BIG-IP ASM System

  Correct Answer: CE

• Question 8:

  On a BIG-IP ASM 3600, in standalone mode, which of the following pool configurations is valid?

  A. Pool named vs_pool with 1 pool member, no persistence, and no load balancing method

  B. Pool named vs_pool with 1 pool member, cookie persistence, and ratio load balancing method

  C. Pool named vs_pool with 2 pool members, cookie persistence, and ratio load balancing method

  D. Pool named vs_pool with 3 pool members, source IP persistence, and least connections load balancing method

  Correct Answer: A

• Question 9:

  The following request is sent to the BIG-IP ASM System:

  GET http://www.example.local/financials/week1.xls?display=yesanduser=johnandlogon=true

  Which of the following components in this requests line represent the query string?

  A. .xls

  B. /week1.xls

  C. /financials/week1.xls

  D. display=yesanduser=johnandlogon=true

  Correct Answer: D

• Question 10:

  Which level of parameter assumes the highest precedence in BIG-IP ASM System processing logic?

  A. Flow

  B. Object

  C. Global

  D. URL

  Correct Answer: A