Objective 2.21 Explain Access Policy Flow and Logic (i.e., Branching, Loops, Macros [when and How to Use Them]) 304 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An access policy includes a loop that is designed to retry a user's password entry up to three times. The loop uses a counter variable 'attempts' that starts at 0. The loop's exit condition is 'attempts >= 3'. The administrator wants to ensure the loop executes the password prompt exactly three times before exiting. Where should the counter increment be placed?

   • AInside the 'then' branch of a conditional that checks if the password is correct.
   • BAt the end of the loop, after the password prompt.
   • CIt does not matter where the increment is placed, as long as it is inside the loop.
   • DAt the beginning of the loop, before the password prompt.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In an access policy, what is the function of a 'branch' item?

   • ATo repeat a set of items until a condition is met.
   • BTo evaluate a condition and direct the user to one of several possible next items.
   • CTo combine multiple incoming paths into a single outgoing path.
   • DTo execute multiple policy items simultaneously.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   An organization has 20 access policies. A sequence of 10 policy items is identical in 15 of them. The security team anticipates that this sequence will need to be modified quarterly. The administrator is deciding between using a macro or manually copying the items into each policy. Which approach is the most appropriate, and why?

   • AUse a macro because it allows the sequence to be updated in one place and automatically applied to all 15 policies.
   • BManually copy the items because macros cannot be edited after they are inserted into a policy.
   • CManually copy the items because macros are not supported in access policies.
   • DUse a macro only if the sequence is used in more than 20 policies.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An access policy includes a loop that is supposed to retry a multi-factor authentication (MFA) challenge up to three times if the user fails the first attempt. The loop is currently configured with a counter variable that increments on each pass. After deploying, the administrator notices that users who fail MFA are stuck in the loop indefinitely. What is the most likely cause of this issue?

   • AThe loop is using a 'while' condition that checks the counter, but the counter is reset to zero at the start of each iteration.
   • BThe loop's exit condition is checking the counter variable before it is incremented, so the loop never sees the updated value.
   • CThe counter variable is incremented only on the success path, so on a failure the loop never progresses toward the exit condition.
   • DThe loop is nested inside another loop, and the inner loop's exit condition is never met.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In an F5 BIG-IP APM access policy, how does a request traverse the policy items during a session?

   • AItems execute in parallel, and the first item to complete determines the outcome.
   • BItems execute in a random order to distribute load across the policy.
   • CItems execute sequentially, starting from the first item and proceeding based on the result of each item.
   • DItems execute only once at the start of the session and are cached for subsequent requests.
   Reveal Solution Discussion Select an answer first