Assess security needs and requirements to create an APM policy · Explain how APM mitigates common attack vectors and methodologies
A financial organization is deploying a new web application through BIG-IP APM and requires stringent protection against cookie hijacking. The security team mandates that session cookies must not be accessible via client-side scripts and must only be transmitted over encrypted channels. Which combination of APM cookie settings will fulfill these requirements?
Answer and explanation
Correct answer: B
To mitigate cookie hijacking, the 'HttpOnly' attribute prevents client-side scripts (like JavaScript) from accessing the session cookie, mitigating Cross-Site Scripting (XSS) risks. The 'Secure' attribute ensures the browser only transmits the cookie over HTTPS connections, protecting it from being intercepted in plain text over unencrypted networks.
Q2Question 2
Advanced
Assess security needs and requirements to create an APM policy · Identify which APM tool(s) should be used to mitigate a specific authentication attack
An e-commerce company is experiencing a brute-force credential stuffing attack targeting their APM-protected customer portal. The attackers are using a highly distributed botnet, making traditional IP blocking ineffective. Which BIG-IP APM feature or integration should the security architect deploy to most effectively mitigate this specific attack methodology?
Answer and explanation
Correct answer: C
IP Intelligence (IPI) dynamically feeds known malicious IP addresses (such as botnets, scanners, and spam sources) into the BIG-IP. By placing an IP Intelligence check early in the VPE flow, APM can instantly reject connections from these distributed botnet IPs before they ever reach the authentication prompt, effectively mitigating distributed brute-force attacks.
Q3Question 3
Advanced
Assess security needs and requirements to create an APM policy · Explain how APM uses and manages session cookies
A multinational corporation is consolidating its employee portals. They have three distinct web applications hosted on different subdomains: app1.corp.com, app2.corp.com, and hr.corp.com.
The organization requires that users only authenticate once when accessing any of these applications. If a user logs into app1.corp.com, they must seamlessly access hr.corp.com without being prompted for credentials again. The security team insists that session data must not be passed via URL parameters for security reasons.
As the APM Specialist, you must design an architecture that supports this requirement while utilizing APM's native capabilities. Which approach provides the optimal solution for this scenario?
APM Multi-Domain SSO is specifically designed for scenarios where users need seamless authentication across different subdomains or completely different domains. It uses a primary authentication host to establish the session and securely passes an authentication token to secondary nodes, allowing the user to access all participating domains without re-authenticating.
Q4Question 4
Intermediate
Assess security needs and requirements to create an APM policy · Determine the appropriate access method for a use case
A healthcare provider mandates that any external device connecting to their internal network must have an updated antivirus software and the corporate registry key present. If these conditions are not met, the user should only be granted access to a restricted web portal. Which combination of APM components is required to enforce this policy?
Answer and explanation
Correct answer: B
To evaluate endpoint security posture (like AV status and registry keys), APM relies on the OPSWAT Endpoint Security (EPSEC) package. The Visual Policy Editor (VPE) must include Antivirus Check and Registry Check items. Based on the success or failure of these checks, the VPE branching logic can assign a Full Network Access Webtop or a restricted Portal Access Webtop.
Q5Question 5
IntermediateMultiple answers
Assess security needs and requirements to create an APM policy · Explain the differences among access methods
An organization requires remote access solutions for different user groups. Contractors need access to a specific internal web application without installing any client software. IT administrators require full Layer 3 access to manage servers. Which TWO access methods are most appropriate for these respective use cases? (Select TWO)
Answer and explanation
Correct answers: A, C
Portal Access operates as a reverse proxy (Layer 7 rewrite) and requires only a standard web browser, making it ideal for contractors who cannot install VPN client software.
Network Access provides a full Layer 3 VPN tunnel, assigning an internal IP address to the client, which is necessary for IT administrators who need to manage servers across various ports and protocols.
Q6Question 6
Beginner
Assess security needs and requirements to create an APM policy · Explain how APM interacts with commonly used applications
A company is integrating BIG-IP APM with their existing VMware Horizon View environment to securely proxy remote desktop connections. What role does APM play in this specific architecture?
Answer and explanation
Correct answer: B
When integrated with VMware View, BIG-IP APM replaces the need for VMware Security Servers. It acts as an authentication gateway (handling AAA, MFA, and endpoint checks) and proxies the PCoIP or Blast Extreme display protocols securely to the internal View Connection Servers.
Register free for 6 more questions
Or unlock all 150 304 questions with explanations, timed mode and flashcards.
