101 · Question #168
Which of the following is correct regarding static parameters?
The correct answer is B. A static parameter is predefined by the web application logic.. A static parameter in BIG-IP ASM is one whose allowed values are fixed and predefined by the web application itself, as opposed to dynamic parameters whose values are generated at runtime.
Question
Which of the following is correct regarding static parameters?
Options
- AA static parameter is stored in a frame cookie.
- BA static parameter is predefined by the web application logic.
- CA static parameter is learned only by using the Deployment Wizard.
- DA static parameter is mapped once when creating the application flow model.
How the community answered
(36 responses)- A3% (1)
- B86% (31)
- C3% (1)
- D8% (3)
Why each option
A static parameter in BIG-IP ASM is one whose allowed values are fixed and predefined by the web application itself, as opposed to dynamic parameters whose values are generated at runtime.
Parameters are not stored in frame cookies; static parameters are defined as policy entities with allowed values, not as cookie storage mechanisms.
A static parameter has a specific set of allowed values that are determined by the application's logic - for example, a dropdown field with fixed options - and ASM enforces that submitted values match this predefined set, preventing parameter tampering.
Static parameters can be added manually by an administrator or learned through Policy Builder traffic analysis, not exclusively through the Deployment Wizard.
Static parameters are not exclusively tied to the application flow model; they are a parameter attribute within the security policy that specifies fixed permissible values regardless of how the policy was built.
Concept tested: BIG-IP ASM static parameter definition and enforcement
Source: https://techdocs.f5.com/kb/en-us/products/big-ip-asm/manuals/product/asm-implementations-13-1-0/7.html
Topics
Community Discussion
No community discussion yet for this question.