A large enterprise has two data centers, each with a pair of BIG-IP APM devices. The administrator wants to configure the AAA profiles so that if an entire data center becomes unavailable, users can still authenticate through the other data center. Which high-availability approach should the administrator implement?

Use a VPN tunnel between the two data centers to synchronize authentication sessions in real time

Enable failover mirroring only between the two devices within each data center

Configure the AAA profiles on all four devices and use a global load balancer to direct users to the active data center

Create a single AAA profile on the primary data center and replicate it to the secondary data center using a manual export/import process

A company has two BIG-IP APM devices in an active/standby pair. The administrator notices that when a failover occurs, users are forced to re-authenticate. The AAA profiles are synchronized, and connection mirroring is enabled on the virtual server. What is the most likely cause of this issue?

The failover is taking too long, and the sessions are timing out

The users are using a different authentication method on the standby device

The standby device does not have the same authentication server configuration

The authentication sessions are not being mirrored because the AAA profile does not have mirroring enabled

A company is configuring APM to authenticate users against an external HTTPS service. The service requires a specific header to be included in the authentication request. The administrator needs to configure the HTTPS AAA profile to include this header. What is the correct way to achieve this?

Use an iRule to modify the HTTP request before it is sent to the HTTPS server

Set the header as a parameter in the HTTPS server's pool configuration

Configure the header in the access policy's authentication settings

Add the header to the URI path in the HTTPS AAA profile

F5Certified Technology Specialist, BIG-IP APM

Domain 2Objective 9

Objective 2.09 Explain Techniques to Simultaneously Configure Multiple AAA Profiles ( E.g., Two-Factor) 304 Practice Questions (Page 4)

Part of the Section 2: Configure and deploy an access profile domain, which makes up ~56% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~20–34 in this domain), expect 1–1 from this objective — we provide 21 practice questions to prepare you well beyond it. (estimate)

21questions here

5free pages

3concepts

Questions 16–20

16application · medium
A large enterprise has two data centers, each with a pair of BIG-IP APM devices. The administrator wants to configure the AAA profiles so that if an entire data center becomes unavailable, users can still authenticate through the other data center. Which high-availability approach should the administrator implement?
Select an answer first
17foundation · easy
Which authentication method in an APM AAA profile is characterized by the user providing a one-time password generated by a hardware or software token?
Select an answer first
18application · medium
A company has two BIG-IP APM devices in an active/standby pair. The administrator notices that when a failover occurs, users are forced to re-authenticate. The AAA profiles are synchronized, and connection mirroring is enabled on the virtual server. What is the most likely cause of this issue?
Select an answer first
19expert · hard
A company is configuring APM to authenticate users against an external HTTPS service. The service requires a specific header to be included in the authentication request. The administrator needs to configure the HTTPS AAA profile to include this header. What is the correct way to achieve this?
Select an answer first
20foundation · easy
In a BIG-IP APM high-availability configuration, which mechanism is used to synchronize AAA profile configuration and session state between two devices in a device group?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 304

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.

Objective 2.09 Explain Techniques to Simultaneously Configure Multiple AAA Profiles ( E.g., Two-Factor) 304 Practice Questions (Page 4)

Questions 16–20

Which authentication method in an APM AAA profile is characterized by the user providing a one-time password generated by a hardware or software token?

A company has two BIG-IP APM devices in an active/standby pair. The administrator notices that when a failover occurs, users are forced to re-authenticate. The AAA profiles are synchronized, and connection mirroring is enabled on the virtual server. What is the most likely cause of this issue?

A company is configuring APM to authenticate users against an external HTTPS service. The service requires a specific header to be included in the authentication request. The administrator needs to configure the HTTPS AAA profile to include this header. What is the correct way to achieve this?

In a BIG-IP APM high-availability configuration, which mechanism is used to synchronize AAA profile configuration and session state between two devices in a device group?

Keep studying — Section 2: Configure and deploy an access profile