An APM administrator is investigating a security incident and needs to determine which administrator made a specific configuration change to the access policy. Which log should the administrator review?

Run SessionDump to extract session table data for the administrator's session.

Review the request log, which records HTTP requests to the APM virtual server.

Review the audit log, which records administrative actions and changes.

Review the access log, which records user access attempts and policy executions.

What is the primary purpose of using LDAP search commands on BIG-IP APM?

To capture HTTP request/response data

To test Active Directory authentication

To verify LDAP configuration and query directory services

An APM administrator is troubleshooting a crash in the access policy engine. The administrator suspects a core file was generated but cannot find it. The default core file location is not being used. What should the administrator check first to determine where core files are being written?

Use SessionDump to check if the crash is related to a session issue.

Check the 'sys db' variable 'db.corefilepath' to see if the core file path has been customized.

Review the access log to see if the crash is logged with a specific error code.

Run the F5 Troubleshooting Utility to collect all core files from the system.

When troubleshooting an APM access policy failure, where would an administrator typically find the error code that describes why the session was denied?

In the browser's developer console

In the BIG-IP system's core dump file

In the BIG-IP system's audit log only

In the APM access log entry for the session

F5Certified Technology Specialist, BIG-IP APM

Domain 4Objective 6

Objective 4.06 Describe the Use of Built-In Trouble-Shooting Tools (e.g., Web Engine Trace, F5 Troubleshooting Utility, SessionDump, ADTest Tool, LDAP Search) 304 Practice Questions (Page 5)

Part of the Section 4: Identify and resolve APM issues domain, which makes up ~18% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–11 in this domain), expect 1–1 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

9concepts

Questions 21–25

21application · medium
An APM administrator is investigating a security incident and needs to determine which administrator made a specific configuration change to the access policy. Which log should the administrator review?
Select an answer first
22foundation · easy
What is the primary purpose of using LDAP search commands on BIG-IP APM?
Select an answer first
23application · medium
An APM administrator is troubleshooting a crash in the access policy engine. The administrator suspects a core file was generated but cannot find it. The default core file location is not being used. What should the administrator check first to determine where core files are being written?
Select an answer first
24foundation · easy
When troubleshooting an APM access policy failure, where would an administrator typically find the error code that describes why the session was denied?
Select an answer first
25foundation · easy
Which command-line utility can be used to view APM access logs on a BIG-IP system?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 304

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.