What does the 'domain' setting in an NTLM SSO profile specify?

The DNS domain of the BIG-IP APM device

The email domain of the users who will access the backend

The Windows domain to which the backend resource belongs

The Kerberos realm of the backend server

An organization uses BIG-IP APM with multiple SSO profiles. During peak usage, SSO authentication is slow. The administrator wants to improve performance without changing the authentication method. Which configuration is most appropriate?

Enable SSO credential caching and optimize connection pooling.

Increase the SSO session timeout for all profiles.

Reduce the number of parallel processing threads.

Disable SSO for less critical applications.

What do the 'username field' and 'password field' settings in a Forms-based SSO profile specify?

The encryption keys used to encrypt the username and password

The names of the HTML form fields that contain the username and password

The session variables that store the username and password

The HTTP headers that carry the username and password

What is the purpose of a Service Principal Name (SPN) in a Kerberos SSO profile?

To define the Kerberos realm of the backend server

To identify the user account that the APM will use for authentication

To specify the encryption algorithm used for Kerberos tickets

To identify the backend service that the user is trying to access

What is a recommended configuration to address SSO performance issues caused by resource contention on the BIG-IP APM?

Optimize connection pooling settings

Use a different SSO profile type

Increase the number of concurrent SSO sessions

Home/Organizations/F5/Exam 304/Objective 2.10 Explain how to configure SSO profiles (e.g., HTTP Basic, NTLM, KERBEROS, SAML, Forms)/Practice Page 6

F5Certified Technology Specialist, BIG-IP APM

Domain 2Objective 10

Objective 2.10 Explain How to Configure SSO Profiles (e.g., HTTP Basic, NTLM, KERBEROS, SAML, Forms) 304 Practice Questions (Page 6)

Part of the Section 2: Configure and deploy an access profile domain, which makes up ~56% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~20–34 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

Curriculum map

Section 1: Assess security needs and requirements to create an APM policy
Section 2: Configure and deploy an access profile
Section 3: Maintain APM access profiles
Section 4: Identify and resolve APM issues

8 Concepts in This Objective

SSO profile overview
HTTP Basic SSO profile
NTLM SSO profile
Kerberos SSO profile
SAML SSO profile
Forms-based SSO profile
SSO performance issue identification
SSO performance tuning configurations

All 7 pages of 304 Objective 2.10 Explain how to configure SSO profiles (e.g., HTTP Basic, NTLM, KERBEROS, SAML, Forms) practice

Page 1 Page 2 Page 3 Page 4 Page 5 Page 6 Page 7

Questions 26–30

26foundation · easy
What does the 'domain' setting in an NTLM SSO profile specify?
Select an answer first
27expert · hard
An organization uses BIG-IP APM with multiple SSO profiles. During peak usage, SSO authentication is slow. The administrator wants to improve performance without changing the authentication method. Which configuration is most appropriate?
Select an answer first
28foundation · easy
What do the 'username field' and 'password field' settings in a Forms-based SSO profile specify?
Select an answer first
29foundation · easy
What is the purpose of a Service Principal Name (SPN) in a Kerberos SSO profile?
Select an answer first
30foundation · easy
What is a recommended configuration to address SSO performance issues caused by resource contention on the BIG-IP APM?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 304

Keep studying — Section 2: Configure and deploy an access profile

Full 304 curriculum →Every domain, objective & concept — with linked practice 304 exam overview →F5 Certified Technology Specialist, BIG-IP APM

Other objectives in Section 2: Configure and deploy an access profile

Objective 2.01 Determine the Circumstances Under Which It Is Appropriate to Use an APM Specific Profile (i.e., Access, Connectivity, Rewrite, VDI and Java Support)5 pages of practice
Objective 2.02 Determine the Circumstances Under Which It Is Appropriate to Use a non-APM Specific Profile (e.g., ServerSSL, Web Acceleration, Compression)4 pages of practice
Objective 2.03 Explain How to Create and Assign an SSL Profile3 pages of practice
Objective 2.04 Determine Appropriate SNAT Settings to Meet Access Requirements for Network Access (e.g., VoIP, Active Mode FTP, Remote Desktop to Network Access Clients)4 pages of practice
Objective 2.05 Explain the Characteristics (e.g., Pros and Cons, Restrictions, Security Implications, HA Setup) of Available AAA Profiles5 pages of practice
Objective 2.06 Explain the Characteristics (e.g., Pros and Cons, Restrictions, Security Implications) of Available SSO Profiles7 pages of practice
Objective 2.07 Explain the Implications of Passwordless Authentication Options in APM and How They Affect SSO (e.g., SAML, Client Certificate, NTLM-end-user)3 pages of practice
Objective 2.08 Explain How to Configure AAA Profiles (e.g., HTTP Basic, AD, LDAP, Radius, TACACS, KERBEROS, RSA, SAML, OCSP, CRLDP)6 pages of practice
Objective 2.09 Explain Techniques to Simultaneously Configure Multiple AAA Profiles ( E.g., Two-Factor)5 pages of practice
Objective 2.11 Explain How to Configure SAML Use Cases (e.g., IDP, SP, IDP-initiated, SP-initiated)1 page of practice
Objective 2.12 Describe How to Add and Remove Client and Machine Certificates2 pages of practice
Objective 2.13 Determine Appropriate Deployment Option(s) to Meet Network Access Requirements (e.g., Standalone Edge Client, Browser Components, Mobile Apps)3 pages of practice
Objective 2.14 Explain How to Configure Access Methods (e.g., Network [SNAT vs. Routed Mode], Portal [rewrite Options], Application, App Tunnel, LTM+APM)5 pages of practice
Objective 2.15 Determine Appropriate Access Methods (e.g., Network, Portal, Application, LTM+APM) to Meet Requirements5 pages of practice
Objective 2.16 Explain How to Configure and Assign ACLs (e.g., L4, L7, Static, Dynamic, Default Action, iRule Events, Logging Options)3 pages of practice
Objective 2.17 Identify Resource Types for Which Associated ACLs Are Automatically Created (e.g., Remote Desktop, Portal Access, Application Tunnels)1 page of practice
Objective 2.18 Describe the ACL Action Types and Their Functions (e.g., Allow, Continue, Discard, Reject)3 pages of practice
Objective 2.19 Describe Methods to Map Microsoft Active Directory Groups to Assigned Resources6 pages of practice
Objective 2.20 Explain the Use of APM Session Variables (e.g., Session Flow, Use in iRules, Variable Assign Policy Item)6 pages of practice
Objective 2.21 Explain Access Policy Flow and Logic (i.e., Branching, Loops, Macros [when and How to Use Them])4 pages of practice
Objective 2.22 Describe the Use and Configuration of Endpoint Checks (e.g., Registry Check, Process Check, Windows Info, Machine Cert Auth)5 pages of practice
Objective 2.23 Describe Customization Options for an Access Policy (logon Page, Webtop, Network Access, Language)3 pages of practice

← Previous pagePage 6 of 7Next page →

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.