QUESTION: 9

The Heuristics process is designed to ensure what aspect of a good security policy?

The response traffic is sampled by the policy builder
A security policy is built with a minimum amount of false positives
The security policy accurately reflects all elements of a web application
All possible parameter values are automatically configured in the security policy

Answer(s): B

QUESTION: 10

When building a policy based on live traffic using the automated policy builder, which of the following elements will not be taken into account when analyzing the traffic?

The size of the response
The requested resource (URI)
The response code from the web server
The parameter values of static based parameters

Answer(s): A

Reveal Solution Next Question

QUESTION: 11

Which of the following statements are correct regarding positive and negative security models? (Choose 2)

Positive security model allows all transactions by default
Negative security model allows all transactions by default
Negative security model allows all transactions by default and rejects only transactions that contain attacks
Positive security model denies all transactions by default and uses rules that allow only those transactions that are considered safe and alid

Answer(s): C,D

Reveal Solution Next Question

QUESTION: 12

Which of the following are correct when using the Policy Builder with trusted traffic? (Choose 2)

All request data observed by the BIG-IP ASM System will be applied to the active security policy
The BIG-IP ASM System will build the security policy without using HTTP response data
Heuristics will be used to determine if an entity becomes an element of an active security policy
The BIG-IP ASM System will automatically scan the web application to look for security violations

Answer(s): A,B

Reveal Solution Next Question

Free F50-526 Exam Braindumps (page: 4)

QUESTION: 9

QUESTION: 10

QUESTION: 11

QUESTION: 12

F50-526 Discussions & Posts