Objective 2.08 Explain How to Configure AAA Profiles (e.g., HTTP Basic, AD, LDAP, Radius, TACACS, KERBEROS, RSA, SAML, OCSP, CRLDP) 304 Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A company uses a non-Microsoft LDAP directory (e.g., OpenLDAP) for user authentication. The BIG-IP APM administrator needs to configure a AAA profile to authenticate users against this directory. The directory uses a standard LDAP port. Which configuration is required?

   • ARADIUS AAA profile with the server IP and port 389
   • BActive Directory AAA profile with the server IP and port 389
   • CLDAP AAA profile with the server IP, port 389, and base DN
   • DTACACS+ AAA profile with the server IP and port 389
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which configuration detail is typically required when creating an Active Directory AAA profile?

   • AThe IP address of the RADIUS server
   • BThe OCSP responder URL
   • CThe domain name and the address of a domain controller
   • DThe URL of the federation service
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   An organization's certificate authority does not provide an online responder, but it publishes a certificate revocation list (CRL) at a known URL. The BIG-IP APM administrator needs to configure certificate revocation checking for client certificates. Which AAA profile should be used?

   • ASAML AAA profile with the CRL certificate
   • BCRLDP profile with the CRL distribution point URL
   • COCSP responder profile with the CRL URL
   • DRADIUS AAA profile with the CRL server
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which statement best describes how an AAA profile is used within an APM access policy?

   • AIt is automatically applied to all virtual servers that use an access policy
   • BIt defines the order in which authentication methods are attempted
   • CIt replaces the need for an access policy in most configurations
   • DIt is referenced by authentication-related access policy items to validate credentials
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company has a legacy web application that only supports HTTP Basic authentication. The BIG-IP APM administrator needs to configure authentication for this application. The company also wants to use RADIUS for centralized authentication. Which configuration should the administrator use?

   • AConfigure a custom iRule to handle both HTTP Basic and RADIUS authentication
   • BConfigure an HTTP Basic AAA profile and a RADIUS AAA profile, and use the access policy to authenticate via RADIUS and then pass credentials to the application via HTTP Basic
   • CConfigure only a RADIUS AAA profile and use it directly for the application
   • DConfigure only an HTTP Basic AAA profile with a local user database
   Reveal Solution Discussion Select an answer first