A company uses RSA SecurID for two-factor authentication. The RSA ACE server is being decommissioned, and the company wants to migrate to a RADIUS-based token service. The BIG-IP APM administrator must configure a AAA profile that supports the new RADIUS token service while minimizing changes to the access policy. Which approach should the administrator take?

Keep the RSA SecurID AAA profile and configure it to use the RADIUS server

Replace the RSA SecurID AAA profile with a RADIUS AAA profile and update the access policy

Use a custom iRule to handle both RSA and RADIUS authentication

Use a RADIUS AAA profile but keep the RSA SecurID profile in the policy as a fallback

What is the primary purpose of an HTTP Basic AAA profile in BIG-IP APM?

To validate credentials sent in the HTTP Authorization header using Basic authentication

To authenticate users by presenting a browser-based login form

To authenticate users against a RADIUS server using HTTP

To provide single sign-on to web applications using Kerberos

In a BIG-IP APM access policy, what is the primary role of an AAA profile?

To define the authentication source and method used to validate user credentials

To store user session attributes after authentication completes

To enforce network access control policies on the BIG-IP system

To encrypt traffic between the client and the BIG-IP system

Which configuration parameter is essential for a TACACS+ AAA profile?

The TACACS+ server IP address and shared secret

Which setting is mandatory when configuring a RADIUS AAA profile?

The shared secret used to encrypt RADIUS packets

F5Certified Technology Specialist, BIG-IP APM

Domain 2Objective 8

Objective 2.08 Explain How to Configure AAA Profiles (e.g., HTTP Basic, AD, LDAP, Radius, TACACS, KERBEROS, RSA, SAML, OCSP, CRLDP) 304 Practice Questions (Page 3)

Part of the Section 2: Configure and deploy an access profile domain, which makes up ~56% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~20–34 in this domain), expect 1–1 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

11concepts

Questions 11–15

11expert · hard
A company uses RSA SecurID for two-factor authentication. The RSA ACE server is being decommissioned, and the company wants to migrate to a RADIUS-based token service. The BIG-IP APM administrator must configure a AAA profile that supports the new RADIUS token service while minimizing changes to the access policy. Which approach should the administrator take?
Select an answer first
12foundation · easy
What is the primary purpose of an HTTP Basic AAA profile in BIG-IP APM?
Select an answer first
13foundation · easy
In a BIG-IP APM access policy, what is the primary role of an AAA profile?
Select an answer first
14foundation · easy
Which configuration parameter is essential for a TACACS+ AAA profile?
Select an answer first
15foundation · easy
Which setting is mandatory when configuring a RADIUS AAA profile?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 304

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.