101 · Question #412
Learning suggestions can be the result of:
The correct answer is D. All the above. ASM's learning engine generates policy suggestions based on any traffic anomaly or change - including benign false positives, actual attacks, or legitimate site updates.
Question
Learning suggestions can be the result of:
Options
- AA false positive
- BA malicious attack
- CA change in the web site content
- DAll the above
How the community answered
(34 responses)- A3% (1)
- B6% (2)
- C3% (1)
- D88% (30)
Why each option
ASM's learning engine generates policy suggestions based on any traffic anomaly or change - including benign false positives, actual attacks, or legitimate site updates.
While false positives alone can trigger learning suggestions, selecting only this choice ignores the other valid triggers.
While malicious attacks alone can trigger learning suggestions, selecting only this choice ignores the other valid triggers.
While website content changes alone can trigger learning suggestions, selecting only this choice ignores the other valid triggers.
ASM's automatic learning engine analyzes all traffic patterns and generates suggestions whenever observed traffic deviates from the current security policy - this includes false positives where legitimate traffic is flagged, actual malicious requests that reveal policy gaps, and site content changes that introduce new parameters or URLs.
Concept tested: ASM automatic policy learning triggers
Source: https://techdocs.f5.com/kb/en-us/products/big-ip_asm/manuals/product/asm-implementations-13-1-0/5.html
Topics
Community Discussion
No community discussion yet for this question.