A BIG-IP APM administrator notices that SSO authentication to a backend application is taking several seconds longer than expected. The SSO profile uses Kerberos. Which configuration change is most likely to improve performance?

Disable the Kerberos SSO profile and use HTTP Basic instead.

Enable Kerberos credential caching and increase the ticket lifetime.

Reduce the SSO session timeout to free resources.

Increase the connection pool size to the backend.

A company uses BIG-IP APM as a SAML SP. Users authenticate via an external IdP, but the cloud application rejects the assertion because a required attribute is missing. The administrator has configured the SAML SSO profile. What is the most likely cause?

The SAML IdP is not reachable from the BIG-IP.

The attribute mappings are not defined in the SAML SSO profile.

The SSO session timeout is too short.

A company is planning to deploy BIG-IP APM for SSO. They have a mix of applications: one uses HTTP Basic, another uses Kerberos. The access policy will authenticate users via Active Directory. What is the best approach for configuring SSO profiles?

Configure the access policy to use the same SSO profile for both applications.

Use a single SSO profile that supports both HTTP Basic and Kerberos.

Use HTTP Basic for both applications because it is easier to configure.

Create separate SSO profiles for each application and assign them in the access policy.

F5Certified Technology Specialist, BIG-IP APM

Domain 2Objective 10

Objective 2.10 Explain How to Configure SSO Profiles (e.g., HTTP Basic, NTLM, KERBEROS, SAML, Forms) 304 Practice Questions (Page 3)

Part of the Section 2: Configure and deploy an access profile domain, which makes up ~56% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~20–34 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

Questions 11–15

11foundation · easy
Which setting is mandatory when configuring an NTLM SSO profile in BIG-IP APM?
Select an answer first
12application · medium
A BIG-IP APM administrator notices that SSO authentication to a backend application is taking several seconds longer than expected. The SSO profile uses Kerberos. Which configuration change is most likely to improve performance?
Select an answer first
13expert · hard
A company uses BIG-IP APM as a SAML SP. Users authenticate via an external IdP, but the cloud application rejects the assertion because a required attribute is missing. The administrator has configured the SAML SSO profile. What is the most likely cause?
Select an answer first
14application · medium
A company is planning to deploy BIG-IP APM for SSO. They have a mix of applications: one uses HTTP Basic, another uses Kerberos. The access policy will authenticate users via Active Directory. What is the best approach for configuring SSO profiles?
Select an answer first
15foundation · easy
Which setting is essential for a Forms-based SSO profile in BIG-IP APM?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 304

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.

Objective 2.10 Explain How to Configure SSO Profiles (e.g., HTTP Basic, NTLM, KERBEROS, SAML, Forms) 304 Practice Questions (Page 3)

Questions 11–15

Which setting is mandatory when configuring an NTLM SSO profile in BIG-IP APM?

A BIG-IP APM administrator notices that SSO authentication to a backend application is taking several seconds longer than expected. The SSO profile uses Kerberos. Which configuration change is most likely to improve performance?

A company uses BIG-IP APM as a SAML SP. Users authenticate via an external IdP, but the cloud application rejects the assertion because a required attribute is missing. The administrator has configured the SAML SSO profile. What is the most likely cause?

A company is planning to deploy BIG-IP APM for SSO. They have a mix of applications: one uses HTTP Basic, another uses Kerberos. The access policy will authenticate users via Active Directory. What is the best approach for configuring SSO profiles?

Which setting is essential for a Forms-based SSO profile in BIG-IP APM?

Keep studying — Section 2: Configure and deploy an access profile