Objective 2.08 Explain How to Configure AAA Profiles (e.g., HTTP Basic, AD, LDAP, Radius, TACACS, KERBEROS, RSA, SAML, OCSP, CRLDP) 304 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which configuration element is essential for a SAML AAA profile?

   • AThe RADIUS shared secret
   • BThe LDAP base DN
   • CThe SAML metadata or endpoint URLs for the identity provider
   • DThe Kerberos realm name
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company uses client certificates for VPN access. The certificate authority provides both an OCSP responder and a CRL distribution point. The administrator wants to ensure that revoked certificates are rejected immediately, but also wants a fallback if the OCSP responder is unavailable. Which configuration should be used?

   • AConfigure only the CRLDP profile
   • BConfigure a custom iRule to handle revocation checking
   • CConfigure only the OCSP responder profile
   • DConfigure both OCSP and CRLDP profiles, with OCSP as the primary and CRLDP as a fallback
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A large enterprise has multiple authentication sources: Active Directory for employees, RADIUS for contractors, and LDAP for a legacy application. The BIG-IP APM administrator needs to configure an access policy that authenticates users against the appropriate source based on their user group. The policy must first determine the user's group, then authenticate against the correct AAA profile. Which approach should the administrator take?

   • AUse a single AAA profile that supports multiple authentication sources
   • BConfigure three separate AAA profiles and use policy branching to select the correct one based on group
   • CUse a RADIUS AAA profile that proxies to all other sources
   • DConfigure a single LDAP AAA profile and map all users to it
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which of the following is a key configuration element for a Kerberos AAA profile?

   • AThe RADIUS shared secret
   • BThe Kerberos realm and KDC address
   • CThe LDAP base DN
   • DThe OCSP responder URL
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which setting is typically required when configuring a CRLDP profile?

   • AThe URL of the CRL distribution point
   • BThe Kerberos realm name
   • CThe RADIUS shared secret
   • DThe OCSP responder URL
   Reveal Solution Discussion Select an answer first