When configuring SAML federation between two BIG-IP systems, which component is responsible for authenticating the user and issuing the SAML assertion?

Access Policy Manager (APM) policy

In a SAML federation configuration between two BIG-IP systems, what is the primary purpose of the service provider (SP) role?

To store user credentials and validate passwords

To authenticate users and issue SAML assertions

To encrypt all network traffic between the two BIG-IP systems

To consume SAML assertions and grant access to protected resources

A company uses BIG-IP APM as a SAML identity provider (IdP) for a partner's service provider (SP). Employees access the partner's application by clicking a link on the company's internal portal. The link points to the BIG-IP APM's SAML IdP endpoint. What must be configured on the BIG-IP APM to support this access method?

A virtual server that accepts SAML responses from the partner's SP.

A SAML SP object that points to the partner's IdP endpoint.

An access policy that authenticates the user and then generates a SAML assertion for the partner's SP.

An iRule that redirects the user to the partner's SP with a SAML request.

Which scenario best describes an IdP-initiated SAML flow?

A user navigates directly to the SP's protected resource and is redirected to the IdP

A user logs into the IdP portal and then clicks a link to access the SP application

The SP sends an authentication request to the IdP without user interaction

The IdP and SP exchange metadata directly without involving the user

In a SAML SP-initiated flow, what typically triggers the authentication process?

The SP administrator manually creates a session for the user

The user directly accesses the IdP's login page

The user attempts to access a protected resource on the SP

The IdP sends an unsolicited assertion to the SP

F5Certified Technology Specialist, BIG-IP APM

Domain 2Objective 11

Objective 2.11 Explain How to Configure SAML Use Cases (e.g., IDP, SP, IDP-initiated, SP-initiated) 304 Practice Questions (Page 1)

Part of the Section 2: Configure and deploy an access profile domain, which makes up ~56% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~20–34 in this domain), expect 1–1 from this objective — we provide 5 practice questions to prepare you well beyond it. (estimate)

5questions here

1free page

2concepts

Questions 1–5

1foundation · easy
When configuring SAML federation between two BIG-IP systems, which component is responsible for authenticating the user and issuing the SAML assertion?
Select an answer first
2foundation · easy
In a SAML federation configuration between two BIG-IP systems, what is the primary purpose of the service provider (SP) role?
Select an answer first
3application · medium
A company uses BIG-IP APM as a SAML identity provider (IdP) for a partner's service provider (SP). Employees access the partner's application by clicking a link on the company's internal portal. The link points to the BIG-IP APM's SAML IdP endpoint. What must be configured on the BIG-IP APM to support this access method?
Select an answer first
4foundation · easy
Which scenario best describes an IdP-initiated SAML flow?
Select an answer first
5foundation · easy
In a SAML SP-initiated flow, what typically triggers the authentication process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 304

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.