Objective 2.06 Explain the Characteristics (e.g., Pros and Cons, Restrictions, Security Implications) of Available SSO Profiles 304 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is a key advantage of using SAML-based SSO over form-based SSO?

   • ASAML SSO does not require the backend application to be modified.
   • BSAML SSO provides a more secure, standards-based method for exchanging authentication data.
   • CSAML SSO works with any web application regardless of its authentication mechanism.
   • DSAML SSO is simpler to configure on the BIG-IP system.
   Reveal Solution Discussion Select an answer first
2. 2expert · medium

   A security architect is comparing the security implications of Kerberos SSO and NTLM SSO for a new deployment. The architect is particularly concerned about the risk of credential theft and replay attacks. Which statement accurately reflects a key security advantage of Kerberos SSO over NTLM SSO?

   • AKerberos uses tickets with timestamps and mutual authentication, which mitigates replay attacks and verifies the identity of both the client and the server
   • BNTLM SSO is more secure because it does not transmit any password material
   • CKerberos SSO does not require the BIG-IP to have any credentials
   • DKerberos SSO is less secure because it relies on a third-party KDC
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a fundamental requirement for Kerberos SSO to function correctly in a BIG-IP APM environment?

   • AThe backend application must support the SAML protocol.
   • BThe BIG-IP system and the backend application must be in the same Active Directory domain or a trusted domain.
   • CThe client device must be a Windows-based machine.
   • DThe backend application must be a web-based application that uses HTML forms.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   An organization has a legacy internal application that only supports NTLM authentication. The application is critical and cannot be upgraded. The APM administrator needs to configure SSO for this application. What is a key limitation the administrator must account for when using an NTLM SSO profile?

   • ANTLM SSO only works with Internet Explorer browsers
   • BThe BIG-IP must be in the same Active Directory domain as the application server
   • CNTLM SSO cannot be used with a virtual server that also has a client SSL profile
   • DNTLM SSO requires the application to be configured for HTTPS
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is a primary characteristic of a form-based SSO profile in BIG-IP APM?

   • AIt submits credentials by mimicking the login form of the backend application.
   • BIt uses Kerberos tickets to authenticate to the backend application.
   • CIt requires the backend application to support the SAML protocol.
   • DIt relies on the HTTP Basic authentication header to pass credentials.
   Reveal Solution Discussion Select an answer first