nerdexam
F5

101 · Question #149

Which of the following statements are correct regarding positive and negative security models? (Choose 2)

The correct answer is C. Negative security model allows all transactions by default and rejects only transactions that D. Positive security model denies all transactions by default and uses rules that allow only those. Positive and negative security models are opposing default-deny vs default-allow approaches to web application firewall traffic handling.

Section 4: Security Basics

Question

Which of the following statements are correct regarding positive and negative security models? (Choose 2)

Options

  • APositive security model allows all transactions by default.
  • BNegative security model denies all transactions by default.
  • CNegative security model allows all transactions by default and rejects only transactions that
  • DPositive security model denies all transactions by default and uses rules that allow only those

How the community answered

(29 responses)
  • A
    10% (3)
  • B
    3% (1)
  • C
    86% (25)

Why each option

Positive and negative security models are opposing default-deny vs default-allow approaches to web application firewall traffic handling.

APositive security model allows all transactions by default.

Allowing all transactions by default describes the negative security model, not the positive model - this statement has the two models reversed.

BNegative security model denies all transactions by default.

Denying all transactions by default is the behavior of the positive (whitelist) security model, not the negative security model - this statement has the definitions swapped.

CNegative security model allows all transactions by default and rejects only transactions thatCorrect

The negative security model (blacklist model) permits all traffic by default and only blocks transactions that match known malicious patterns or signatures, relying on a known-bad list to identify threats.

DPositive security model denies all transactions by default and uses rules that allow only thoseCorrect

The positive security model (whitelist model) denies all traffic by default and only permits transactions that match explicitly defined allowed behaviors, offering stronger protection against unknown attack types.

Concept tested: Positive vs negative web application security model definitions

Source: https://techdocs.f5.com/en-us/bigip-16-1-0/big-ip-asm-implementations/getting-started-with-asm.html

Topics

#positive security model#negative security model#allow/deny rules#security policy

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 101 Practice