A company uses BIG-IP APM to provide SSO to multiple backend applications. One application requires HTTP Basic, another requires NTLM. The access policy authenticates users once. How should the SSO profiles be configured?

Use HTTP Basic for both applications because it is simpler.

Create a single SSO profile that supports both HTTP Basic and NTLM simultaneously.

Create two separate SSO profiles, one for each application, and assign them to the respective resources in the access policy.

Configure the access policy to use the same SSO profile for both applications.

A company is configuring Kerberos SSO for a web application that uses Kerberos authentication. The BIG-IP APM will authenticate users via Active Directory. The Kerberos SSO profile must be configured to obtain service tickets for the backend service. Which configuration is required?

Enable 'Use Local DNS' and set the workstation name.

Specify the backend server's IP and the NTLM domain.

Set the authentication server to the backend and choose 'Forms' as the method.

Define the Kerberos realm, KDC, and the SPN for the backend service.

Which setting is required when configuring a SAML SSO profile in BIG-IP APM?

HTTP Basic authentication server

An organization uses BIG-IP APM to provide SSO to an internal SharePoint site that authenticates with NTLM. The APM policy authenticates users against Active Directory. The NTLM SSO profile must be configured to pass the user's credentials. Which setting is essential for the NTLM SSO profile to work?

Enable 'Use NTLMv2' and set the encryption type to AES.

Specify the backend server's IP address and the service principal name (SPN).

Specify the NTLM authentication server (AD domain controller) and the domain name.

Set the workstation name and local address to the client's IP.

An organization uses BIG-IP APM as a SAML service provider to provide SSO to a cloud application. The APM policy authenticates users via an external SAML IdP. The SAML SSO profile must be configured to pass user attributes to the application. Which configuration is required?

Specify the SAML IdP and configure attribute mappings.

Specify the backend server's IP and the form action URL.

Define the NTLM domain and the workstation name.

Set the authentication server to the backend and enable 'Use Kerberos'.

F5Certified Technology Specialist, BIG-IP APM

Domain 2Objective 10

Objective 2.10 Explain How to Configure SSO Profiles (e.g., HTTP Basic, NTLM, KERBEROS, SAML, Forms) 304 Practice Questions (Page 5)

Part of the Section 2: Configure and deploy an access profile domain, which makes up ~56% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~20–34 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

Questions 21–25

21application · medium
A company uses BIG-IP APM to provide SSO to multiple backend applications. One application requires HTTP Basic, another requires NTLM. The access policy authenticates users once. How should the SSO profiles be configured?
Select an answer first
22application · medium
A company is configuring Kerberos SSO for a web application that uses Kerberos authentication. The BIG-IP APM will authenticate users via Active Directory. The Kerberos SSO profile must be configured to obtain service tickets for the backend service. Which configuration is required?
Select an answer first
23foundation · easy
Which setting is required when configuring a SAML SSO profile in BIG-IP APM?
Select an answer first
24application · medium
An organization uses BIG-IP APM to provide SSO to an internal SharePoint site that authenticates with NTLM. The APM policy authenticates users against Active Directory. The NTLM SSO profile must be configured to pass the user's credentials. Which setting is essential for the NTLM SSO profile to work?
Select an answer first
25application · medium
An organization uses BIG-IP APM as a SAML service provider to provide SSO to a cloud application. The APM policy authenticates users via an external SAML IdP. The SAML SSO profile must be configured to pass user attributes to the application. Which configuration is required?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 304

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.