Objective 2.19 Describe Methods to Map Microsoft Active Directory Groups to Assigned Resources 304 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   An administrator needs to map two different AD groups to two different resources in the same access policy. What is the best way to configure this?

   • AUse a single group mapping rule that assigns both resources to both groups.
   • BCreate a new AD group that includes members of both groups and map that group to both resources.
   • CAdd two group mapping rules in the same access policy, each assigning a different resource.
   • DCreate two separate access policies, one for each group.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   An administrator is troubleshooting why a user is not seeing a resource. The access policy uses a group mapping rule. The administrator checks the session variables and sees that the user's group memberships are not listed. What is a likely cause?

   • AThe access policy is using the wrong resource.
   • BThe AD server is unreachable during authentication.
   • CThe user's account is disabled in AD.
   • DThe AD query is not configured to retrieve group memberships.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which protocol does BIG-IP APM use to query Active Directory for a user's group memberships?

   • ASNMP
   • BHTTP
   • CLDAP
   • DRADIUS
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   An administrator is troubleshooting a group mapping issue. The user is a member of a nested group that is part of a top-level group mapped to a resource. The session variables show the top-level group but not the nested group. The access policy uses the top-level group name. What is the most likely cause?

   • AThe AD query is not configured to retrieve nested group memberships.
   • BThe resource assignment is incorrect.
   • CThe access policy is using the wrong group name.
   • DThe user is not actually a member of the nested group.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   An organization has a requirement to grant access to a resource only to users who are members of both 'GroupA' and 'GroupB'. The administrator is configuring the access policy. What is the best way to implement this?

   • ACreate a new AD group that includes users who are members of both groups and map that group to the resource.
   • BUse a single group mapping rule that checks for membership in 'GroupA' and assign the resource, then add 'GroupB' as a secondary group.
   • CCreate a single rule that checks for membership in both groups using an AND condition.
   • DCreate two separate group mapping rules, one for each group, and assign the resource in both.
   Reveal Solution Discussion Select an answer first