Objective 2.05 Explain the Characteristics (e.g., Pros and Cons, Restrictions, Security Implications, HA Setup) of Available AAA Profiles 304 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   When using a TACACS+ AAA profile in BIG-IP APM, what is a common HA setup consideration?

   • AEach BIG-IP device must have its own TACACS+ server
   • BThe TACACS+ server must be configured with the same shared secret for both BIG-IP devices
   • CTACACS+ profiles cannot be synchronized to the standby device
   • DTACACS+ uses UDP, so HA is not supported
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is deploying BIG-IP APM for employee remote access. They use Active Directory for all user authentication and need to enforce different access policies based on AD group membership. The security team also requires that password changes be reflected immediately. Which AAA profile type should be used?

   • AActive Directory
   • BLocal
   • CLDAP
   • DRADIUS
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is a primary advantage of using a local AAA profile in BIG-IP APM?

   • AIt does not require an external authentication server
   • BIt automatically synchronizes user accounts with Active Directory
   • CIt supports Kerberos single sign-on
   • DIt provides the highest level of security among all AAA profiles
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An organization is deploying BIG-IP APM for remote access and has a legacy RADIUS server that does not support any directory integration. The security team requires that authentication requests be encrypted and that the RADIUS server be able to authorize users based on attributes returned during authentication. Which configuration should the administrator choose?

   • AConfigure an LDAP AAA profile to query the RADIUS server's user database.
   • BConfigure a TACACS+ AAA profile to leverage its encryption and attribute support.
   • CConfigure a RADIUS AAA profile with a shared secret and use RADIUS attributes for authorization.
   • DConfigure a local AAA profile and manually replicate the RADIUS user database.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is deploying BIG-IP APM for a web portal. They have an existing LDAP directory that is used for authentication across the organization. The administrator needs to configure an AAA profile that will allow users to authenticate with their LDAP credentials and also retrieve group memberships to enforce access policies. Which AAA profile type should be used?

   • AActive Directory
   • BRADIUS
   • CLDAP
   • DLocal
   Reveal Solution Discussion Select an answer first