What is the general process for mapping Active Directory groups to resources in a BIG-IP APM access profile?

Define group-to-resource assignments in the access policy, then configure the APM to query AD for group memberships during authentication

Export AD groups to a CSV file and import them into the APM configuration

Create a local user account for each AD group and assign resources to that account

Manually add each user to the resource's access list in the APM

What is the first step to configure AD group mapping in a BIG-IP APM access profile?

Create an Active Directory authentication server object

Define the group-to-resource assignments in the access policy

Enable the APM license for group mapping

Create a local user database for the groups

What is a characteristic of using nested groups for AD group mapping in BIG-IP APM?

Nested groups are not supported by APM

Nested groups are automatically resolved by default

Nested groups allow a user to inherit memberships from parent groups

Nested groups are only used for authentication, not for resource mapping

A user is a member of a group that is mapped to a resource, but they are not getting access. The administrator checks the session variables and sees the group is listed. What is the next step to troubleshoot?

Check the access policy logs to see if the group mapping rule is being evaluated.

Recreate the group in AD and re-add the user.

Restart the APM service on the BIG-IP.

Change the group mapping method from name to SID.

A user reports they are not receiving access to a resource that their AD group should grant. What is a common first troubleshooting step?

Verify that the user is a member of the correct AD group

F5Certified Technology Specialist, BIG-IP APM

Domain 2Objective 19

Objective 2.19 Describe Methods to Map Microsoft Active Directory Groups to Assigned Resources 304 Practice Questions (Page 5)

Part of the Section 2: Configure and deploy an access profile domain, which makes up ~56% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~20–34 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

5concepts

Questions 21–25

21foundation · easy
What is the general process for mapping Active Directory groups to resources in a BIG-IP APM access profile?
Select an answer first
22foundation · easy
What is the first step to configure AD group mapping in a BIG-IP APM access profile?
Select an answer first
23foundation · easy
What is a characteristic of using nested groups for AD group mapping in BIG-IP APM?
Select an answer first
24application · medium
A user is a member of a group that is mapped to a resource, but they are not getting access. The administrator checks the session variables and sees the group is listed. What is the next step to troubleshoot?
Select an answer first
25foundation · easy
A user reports they are not receiving access to a resource that their AD group should grant. What is a common first troubleshooting step?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 304

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.