A network operations team wants to authenticate administrators accessing the BIG-IP management interface using the company's TACACS+ server. The BIG-IP APM administrator needs to configure a AAA profile for this purpose. Which AAA profile type should be used?

LDAP AAA profile with the server IP and base DN

TACACS+ AAA profile with the server IP and shared secret

RADIUS AAA profile with the server IP and shared secret

Kerberos AAA profile with the server IP and realm

What is the primary purpose of a CRLDP profile in BIG-IP APM?

To provide single sign-on using Kerberos

To authenticate users using LDAP

To authenticate users using RADIUS

To download and use certificate revocation lists from a distribution point

A company uses client certificates for VPN authentication. The administrator needs to ensure that revoked certificates are rejected in real time. The certificate authority (CA) provides an online responder service. Which AAA profile should be configured to check certificate revocation status?

OCSP responder profile with the responder URL

CRLDP profile with the CRL distribution point URL

Kerberos AAA profile with the CA certificate

LDAP AAA profile with the CA directory

A Windows-centric enterprise wants to enable seamless SSO for users accessing an internal web application through BIG-IP APM. The users are already authenticated to the domain. The administrator needs to configure a AAA profile that uses the existing Kerberos tickets. Which AAA profile type should be used?

Active Directory AAA profile with the domain details

SAML AAA profile with the domain details

HTTP Basic AAA profile with the domain details

Kerberos AAA profile with the realm and KDC details

Which of the following is a common configuration parameter for an LDAP AAA profile?

The LDAP server hostname and port

F5Certified Technology Specialist, BIG-IP APM

Domain 2Objective 8

Objective 2.08 Explain How to Configure AAA Profiles (e.g., HTTP Basic, AD, LDAP, Radius, TACACS, KERBEROS, RSA, SAML, OCSP, CRLDP) 304 Practice Questions (Page 5)

Part of the Section 2: Configure and deploy an access profile domain, which makes up ~56% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~20–34 in this domain), expect 1–1 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

11concepts

Questions 21–25

21application · medium
A network operations team wants to authenticate administrators accessing the BIG-IP management interface using the company's TACACS+ server. The BIG-IP APM administrator needs to configure a AAA profile for this purpose. Which AAA profile type should be used?
Select an answer first
22foundation · easy
What is the primary purpose of a CRLDP profile in BIG-IP APM?
Select an answer first
23application · medium
A company uses client certificates for VPN authentication. The administrator needs to ensure that revoked certificates are rejected in real time. The certificate authority (CA) provides an online responder service. Which AAA profile should be configured to check certificate revocation status?
Select an answer first
24application · medium
A Windows-centric enterprise wants to enable seamless SSO for users accessing an internal web application through BIG-IP APM. The users are already authenticated to the domain. The administrator needs to configure a AAA profile that uses the existing Kerberos tickets. Which AAA profile type should be used?
Select an answer first
25foundation · easy
Which of the following is a common configuration parameter for an LDAP AAA profile?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 304

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.