101 · Question #186
The following request is sent to the BIG-IP ASM System: Which of the following components in this requests line represent the query string?
The correct answer is D. display=yes&user=john&logon=true. In an HTTP request URL, the query string is the portion that follows the '?' character and contains key-value parameter pairs passed to the server.
Question
The following request is sent to the BIG-IP ASM System:
Which of the following components in this requests line represent the query string?
Options
- A.xls
- B/week1.xls
- C/financials/week1.xls
- Ddisplay=yes&user=john&logon=true
How the community answered
(20 responses)- A5% (1)
- B5% (1)
- D90% (18)
Why each option
In an HTTP request URL, the query string is the portion that follows the '?' character and contains key-value parameter pairs passed to the server.
'.xls' is the file extension component, which is part of the filename in the URI path and not the query string.
'/week1.xls' is the filename component of the URI path, located before the '?' delimiter that begins the query string.
'/financials/week1.xls' is the full URI path component, which appears before the '?' character that separates the path from the query string.
The query string begins after the '?' delimiter in a URL and consists of one or more key-value pairs separated by '&' characters. In this request, 'display=yes&user=john&logon=true' is the query string that BIG-IP ASM parses and inspects as part of its HTTP request processing. ASM applies parameter-level security checks specifically to these query string values.
Concept tested: HTTP request query string identification in BIG-IP ASM
Source: https://datatracker.ietf.org/doc/html/rfc3986#section-3.4
Topics
Community Discussion
No community discussion yet for this question.