How does an SSO profile integrate with an access policy in BIG-IP APM?

It is referenced by an SSO action in the access policy to apply the SSO configuration to the session

It replaces the access policy's authentication steps with its own authentication mechanism

It is configured as a separate access policy that runs before the main policy

It is automatically applied to all virtual servers that use the same access profile

A BIG-IP APM administrator is troubleshooting SSO performance issues. Users report that SSO authentication is slow during peak hours. The administrator suspects resource contention. Which diagnostic step is most appropriate?

Disable the SSO profile to see if performance improves.

Increase the SSO session timeout to reduce authentication frequency.

Monitor CPU and memory usage on the BIG-IP during peak hours.

Check the backend server's logs for authentication errors.

What is the primary purpose of an SSO profile in BIG-IP APM?

To enforce access control policies on backend resources based on user roles

To provide users with single sign-on access to backend resources by automatically supplying credentials or tokens

To encrypt all traffic between the client and the backend server

To authenticate users against an external identity provider before they access the network

An administrator configures an HTTP Basic SSO profile for a backend application. Users authenticate successfully, but the backend returns a 401 error. The administrator verifies that the username and password are correct. Which setting in the HTTP Basic SSO profile is most likely causing the issue?

The username source is set to 'Session Variable' instead of 'Username and Password'.

The authentication server is set to the backend server instead of the AD server.

The request encoding is set to UTF-8, but the backend expects ISO-8859-1.

The SSO profile is not assigned to the access policy.

Which component is essential for a Kerberos SSO profile in BIG-IP APM?

Forms-based authentication server

F5Certified Technology Specialist, BIG-IP APM

Domain 2Objective 10

Objective 2.10 Explain How to Configure SSO Profiles (e.g., HTTP Basic, NTLM, KERBEROS, SAML, Forms) 304 Practice Questions (Page 2)

Part of the Section 2: Configure and deploy an access profile domain, which makes up ~56% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~20–34 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

Questions 6–10

6foundation · easy
How does an SSO profile integrate with an access policy in BIG-IP APM?
Select an answer first
7expert · hard
A BIG-IP APM administrator is troubleshooting SSO performance issues. Users report that SSO authentication is slow during peak hours. The administrator suspects resource contention. Which diagnostic step is most appropriate?
Select an answer first
8foundation · easy
What is the primary purpose of an SSO profile in BIG-IP APM?
Select an answer first
9application · medium
An administrator configures an HTTP Basic SSO profile for a backend application. Users authenticate successfully, but the backend returns a 401 error. The administrator verifies that the username and password are correct. Which setting in the HTTP Basic SSO profile is most likely causing the issue?
Select an answer first
10foundation · easy
Which component is essential for a Kerberos SSO profile in BIG-IP APM?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 304

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.