Objective 2.06 Explain the Characteristics (e.g., Pros and Cons, Restrictions, Security Implications) of Available SSO Profiles 304 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is a key advantage of using an APM-based SSO profile compared to an external SSO mechanism?

   • AIt eliminates the need for any backend application changes.
   • BIt provides a centralized point of control and policy enforcement within the access policy.
   • CIt is always more secure than external SSO mechanisms.
   • DIt requires less configuration on the BIG-IP system.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is a recommended mitigation for the security risk of credential exposure in form-based or HTTP Basic SSO?

   • AStore the user's password in the BIG-IP configuration for later use.
   • BEnsure the backend application is accessible only via HTTPS.
   • CUse a shared service account with a very complex password.
   • DDisable the SSO profile and require users to log in manually.
   Reveal Solution Discussion Select an answer first
4. 8expert · medium

   An APM administrator is configuring an OAuth 2.0 SSO profile for a web application that uses the Authorization Code flow. The administrator has set up the client ID and client secret. During testing, the BIG-IP successfully redirects the user to the authorization server, and the user authenticates. However, the BIG-IP fails to exchange the authorization code for an access token. What is the most likely cause of this failure?

   • AThe redirect URI configured in the BIG-IP's OAuth client does not exactly match the redirect URI registered with the authorization server
   • BThe BIG-IP is not configured to use HTTPS
   • CThe user's browser does not support JavaScript
   • DThe access token has already expired
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is a limitation specific to form-based SSO profiles?

   • AThey can only be used with applications that support OAuth 2.0.
   • BThey require the user to have a Kerberos ticket.
   • CThey can only be used with applications that support the SAML protocol.
   • DThey are sensitive to changes in the backend application's login page structure.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is a key advantage of using an HTTP Basic SSO profile?

   • AIt is the most secure SSO method available in APM.
   • BIt uses a one-time password that is generated for each session.
   • CIt is simple to configure and widely supported by web servers and applications.
   • DIt does not require the user to have an account on the backend application.
   Reveal Solution Discussion Select an answer first