An administrator is configuring an access profile to map the AD group 'Sales' to the 'SalesPortal' resource. They have already added the AD authentication server and created the access policy. What is the correct sequence to complete the mapping?

Create a new AD server for the 'Sales' group, then link it to the resource.

Add a rule in the access policy that checks group membership and assigns the resource, then test the policy.

Assign the 'Sales' group to the virtual server's access policy, then enable the resource.

Define the group-to-resource assignment in the access profile's 'Resource Mapping' tab, then deploy the policy.

In a BIG-IP APM access profile, what is the primary purpose of mapping Microsoft Active Directory groups to assigned resources?

To synchronize user passwords with Active Directory

To replace Active Directory as the identity provider

To authenticate users against the Active Directory domain controller

To define which resources a user can access based on their Active Directory group memberships

An administrator is configuring group mapping and wants to ensure that group memberships are retrieved from a specific AD domain controller. What should they configure?

The access policy to use a specific domain controller for group lookup.

The virtual server to use a specific domain controller.

The group mapping rule to include the domain controller's IP address.

The AD authentication server's server pool to include that domain controller.

In a BIG-IP APM access policy, where do you define the mapping between AD groups and assigned resources?

In the Active Directory server object settings

In the APM configuration utility under Access Profiles

In the access policy using assignment and rule-based actions

Which of the following is a common cause of AD group mapping failures in BIG-IP APM?

The AD server is unreachable from the BIG-IP device

The resource is not configured with a public IP address

The user's browser is not compatible with APM

F5Certified Technology Specialist, BIG-IP APM

Domain 2Objective 19

Objective 2.19 Describe Methods to Map Microsoft Active Directory Groups to Assigned Resources 304 Practice Questions (Page 4)

Part of the Section 2: Configure and deploy an access profile domain, which makes up ~56% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~20–34 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

5concepts

Questions 16–20

16application · medium
An administrator is configuring an access profile to map the AD group 'Sales' to the 'SalesPortal' resource. They have already added the AD authentication server and created the access policy. What is the correct sequence to complete the mapping?
Select an answer first
17foundation · easy
In a BIG-IP APM access profile, what is the primary purpose of mapping Microsoft Active Directory groups to assigned resources?
Select an answer first
18application · medium
An administrator is configuring group mapping and wants to ensure that group memberships are retrieved from a specific AD domain controller. What should they configure?
Select an answer first
19foundation · easy
In a BIG-IP APM access policy, where do you define the mapping between AD groups and assigned resources?
Select an answer first
20foundation · easy
Which of the following is a common cause of AD group mapping failures in BIG-IP APM?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 304

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.