F5 ASM Test Prep

by Michael McNeil

Season 1

1.01 Explain the potential effects of common attacks on web applications • Understand and describe how the ASM can affect clients and applications directly while in either transparent or blocking mode • Summarize the OWASP Top Ten

1.01 Explain the potential effects of common attacks on web applications • Understand and describe how the ASM can affect clients and applications directly while in either transparent or blocking mode • Summarize the OWASP Top Ten

S1 · E1

May 11, 2026

48:56

1.02 Explain how specific security policies mitigate various web application attacks • Understand/interpret an iRule or LTM policy to map application traffic to an ASM policy • Explain the trade-offs between security, manageability, false positives,

1.02 Explain how specific security policies mitigate various web application attacks • Understand/interpret an iRule or LTM policy to map application traffic to an ASM policy • Explain the trade-offs between security, manageability, false positives, and performance

S1 · E2

May 11, 2026

21:45

1.03 Determine the appropriate policy features and granularity for a given set of requirements

1.03 Determine the appropriate policy features and granularity for a given set of requirements • Understand application (security) requirements and convert requirements to technical tasks

S1 · E3

May 11, 2026

52:35

1.04 Determine which deployment method is most appropriate for a given set of requirements

1.04 Determine which deployment method is most appropriate for a given set of requirements • Determine which deployment method is most appropriate given the circumstances (web services, vulnerability scanner, templates, rapid deployment model)

S1 · E4

May 11, 2026

50:46

1.05 Explain the automatic policy builder lifecycle

1.05 Explain the automatic policy builder lifecycle • Create any profiles required to support the policy deployment (xml, JSON, logging profiles) • Implement anomaly detection appropriate to the web app (D/DoS protection, brute force attack, web scraping, proactive bot defense)

S1 · E5

May 11, 2026

50:20

1.06 Review and evaluate policy settings based on information gathered from ASM (attack signatures, DataGuard, entities)

1.06 Review and evaluate policy settings based on information gathered from ASM (attack signatures, DataGuard, entities) • Configure initial policy building settings (automatic policy builder settings)

S1 · E6

May 11, 2026

54:55

1.10 Describe the management of the attack signature lifecycle and select the appropriate attack signatures or signature sets

1.10 Describe the management of the attack signature lifecycle and select the appropriate attack signatures or signature sets • Understand management of attack signature lifecycle (staging, enforcement readiness period) and select appropriate attack signatures or signature sets.

S1 · E10

May 11, 2026

33:51

1 of 3

F5 ASM Test Prep

1.01 Explain the potential effects of common attacks on web applications • Understand and describe how the ASM can affect clients and applications directly while in either transparent or blocking mode • Summarize the OWASP Top Ten

1.02 Explain how specific security policies mitigate various web application attacks • Understand/interpret an iRule or LTM policy to map application traffic to an ASM policy • Explain the trade-offs between security, manageability, false positives,

1.03 Determine the appropriate policy features and granularity for a given set of requirements

1.04 Determine which deployment method is most appropriate for a given set of requirements

1.05 Explain the automatic policy builder lifecycle

1.06 Review and evaluate policy settings based on information gathered from ASM (attack signatures, DataGuard, entities)

1.07 Define appropriate policy structure for policy elements

1.08 Explain options and potential results within the deployment wizard

1.09 Explain available logging options

1.10 Describe the management of the attack signature lifecycle and select the appropriate attack signatures or signature sets