F5 F50-536 Exam Syllabus Topics:
| Section | Weight | Objectives |
|---|---|---|
| Topic 1: Learning, Reporting & Troubleshooting | 15% | - Traffic learning & policy tightening - Logging, reporting & analytics - Violation handling & troubleshooting |
| Topic 2: Signatures, Filters & Protections | 20% | - Attack signature sets & updates - File type, URL, parameter protections - Data Guard & brute force protection |
| Topic 3: Security Concepts & Policies | 25% | - Security policy creation & deployment - Positive vs negative security models - Policy properties & enforcement modes |
| Topic 4: Web Vulnerabilities & Attacks | 20% | - Data leakage prevention - SQL injection, XSS, CSRF - Protocol anomalies & evasion techniques |
| Topic 5: Application Delivery Fundamentals | 20% | - HTTP/HTTPS protocol basics - BIG-IP system architecture - Traffic management concepts |
F5 BIG-IP ASM v10.x Sample Questions:
Question #1
Which of the following are correct regarding Wildcard entities? (Choose 2)
A. Wildcard entities can be applied to file types, URLs, cookies and parameters.
B. Wildcard entities are the basis for positive security logic.
C. Wildcard entities require the need to learn only from violations.
D. Wildcard entities are the basis for negative security logic.
Question #2
Which of the following can be associated with an XML profile?
A. Flow
B. File type
C. Parameter
D. Method
Question #3
The BIG-IP ASM System sets two types of cookies to enforce elements in the security policy. The two types are main and frame cookies. What is the purpose of the frame cookie? (Choose 2)
A. Handles dynamic parameter names and flow extractions
B. Detects session expiration
C. Stores dynamic parameters and values
D. Validates domain cookies
Question #4
The Web Application Security Administrator user role can perform which of the following functions? (Choose 2)
A. Create new HTTP class profiles
B. Modify HTTP class profiles
C. Assign HTTP class profiles to virtual servers
D. Configure Advanced options within the BIG-IP ASM System
E. Create new Attack signature sets
Question #5
There are multiple HTTP class profiles assigned to a virtual server. Each profile has Application Security enabled. Which statement is true?
A. Traffic will process through every HTTP class profile every time.
B. Traffic will process through the first HTTP class profile that it matches and then stops.
C. Traffic will process through one HTTP class profile and if the traffic matches another profile, BIG-IP System will send a redirect to the client.
D. Traffic will only process through the HTTP class profile that it matches but always processes through the whole list and will process through each HTTP class profile it matches.
Solutions:
| Question #1 Correct Answer: A,B | Question #2 Correct Answer: C | Question #3 Correct Answer: A,C | Question #4 Correct Answer: D,E | Question #5 Correct Answer: B |
789 Customer Reviews
Quality and ValueITCertKing Practice Exams are written to the highest standards of technical accuracy, using only certified subject matter experts and published authors for development - no all study materials.
Tested and ApprovedWe are committed to the process of vendor and third party approvals. We believe professionals and executives alike deserve the confidence of quality coverage these authorizations provide.
Easy to PassIf you prepare for the exams using our ITCertKing testing engine, It is easy to succeed for all certifications in the first attempt. You don't have to deal with all dumps or any free torrent / rapidshare all stuff.
Try Before BuyITCertKing offers free demo of each product. You can check out the interface, question quality and usability of our practice exams before you decide to buy.
