An organization has an internal web application that supports HTTP Basic authentication. The security team mandates that user credentials must not be transmitted in a way that can be easily decoded by an attacker on the network. The APM administrator is configuring an SSO profile for this application. What is the most important configuration consideration to meet this security requirement?

Ensure the connection between the BIG-IP and the application is over HTTPS

Enable Kerberos SSO instead of HTTP Basic

Configure the SSO profile to use a different username attribute

Use a strong password policy for the application's service account

What is the primary purpose of a SAML SSO profile in BIG-IP APM?

To use SAML for authenticating the user to the BIG-IP access policy.

To allow the BIG-IP to act as an Identity Provider (IdP) and provide SSO to external SAML-based applications.

To enable the BIG-IP to act as a Service Provider (SP) and trust an external Identity Provider (IdP).

To translate SAML assertions into Kerberos tickets for backend applications.

What is the primary purpose of an OAuth/OIDC SSO profile in BIG-IP APM?

To use OAuth for authenticating the user to the BIG-IP access policy.

To allow the BIG-IP to act as an OAuth/OIDC client and obtain tokens for accessing protected resources.

To translate OAuth tokens into Kerberos tickets for legacy applications.

To enable the BIG-IP to act as a resource server for APIs.

Which of the following is a common disadvantage of using an external SSO mechanism instead of an APM-based SSO profile?

The BIG-IP system cannot enforce access policies.

It can introduce a dependency on an additional infrastructure component.

It requires the use of a specific authentication type in the access policy.

It is only compatible with cloud-based applications.

Home/Organizations/F5/Exam 304/Objective 2.06 Explain the characteristics (e.g., pros and cons, restrictions, security implications) of available SSO profiles/Practice Page 7

F5Certified Technology Specialist, BIG-IP APM

Domain 2Objective 6

Objective 2.06 Explain the Characteristics (e.g., Pros and Cons, Restrictions, Security Implications) of Available SSO Profiles 304 Practice Questions (Page 7)

Part of the Section 2: Configure and deploy an access profile domain, which makes up ~56% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~20–34 in this domain), expect 1–1 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

10concepts

Curriculum map

Section 1: Assess security needs and requirements to create an APM policy
Section 2: Configure and deploy an access profile
Section 3: Maintain APM access profiles
Section 4: Identify and resolve APM issues

10 Concepts in This Objective

SSO Profile Types Overview
APM SSO vs. External SSO
Form-Based SSO
HTTP Basic SSO
Kerberos SSO
NTLM SSO
SAML SSO
OAuth/OpenID Connect SSO
Restrictions and Limitations of SSO Profiles
Security Implications of SSO Profiles

All 7 pages of 304 Objective 2.06 Explain the characteristics (e.g., pros and cons, restrictions, security implications) of available SSO profiles practice

Page 1 Page 2 Page 3 Page 4 Page 5 Page 6 Page 7

Questions 31–34

31application · medium
An organization has an internal web application that supports HTTP Basic authentication. The security team mandates that user credentials must not be transmitted in a way that can be easily decoded by an attacker on the network. The APM administrator is configuring an SSO profile for this application. What is the most important configuration consideration to meet this security requirement?
Select an answer first
32foundation · easy
What is the primary purpose of a SAML SSO profile in BIG-IP APM?
Select an answer first
33foundation · easy
What is the primary purpose of an OAuth/OIDC SSO profile in BIG-IP APM?
Select an answer first
34foundation · easy
Which of the following is a common disadvantage of using an external SSO mechanism instead of an APM-based SSO profile?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 304

Keep studying — Section 2: Configure and deploy an access profile

Full 304 curriculum →Every domain, objective & concept — with linked practice 304 exam overview →F5 Certified Technology Specialist, BIG-IP APM

Other objectives in Section 2: Configure and deploy an access profile

Objective 2.01 Determine the Circumstances Under Which It Is Appropriate to Use an APM Specific Profile (i.e., Access, Connectivity, Rewrite, VDI and Java Support)5 pages of practice
Objective 2.02 Determine the Circumstances Under Which It Is Appropriate to Use a non-APM Specific Profile (e.g., ServerSSL, Web Acceleration, Compression)4 pages of practice
Objective 2.03 Explain How to Create and Assign an SSL Profile3 pages of practice
Objective 2.04 Determine Appropriate SNAT Settings to Meet Access Requirements for Network Access (e.g., VoIP, Active Mode FTP, Remote Desktop to Network Access Clients)4 pages of practice
Objective 2.05 Explain the Characteristics (e.g., Pros and Cons, Restrictions, Security Implications, HA Setup) of Available AAA Profiles5 pages of practice
Objective 2.07 Explain the Implications of Passwordless Authentication Options in APM and How They Affect SSO (e.g., SAML, Client Certificate, NTLM-end-user)3 pages of practice
Objective 2.08 Explain How to Configure AAA Profiles (e.g., HTTP Basic, AD, LDAP, Radius, TACACS, KERBEROS, RSA, SAML, OCSP, CRLDP)6 pages of practice
Objective 2.09 Explain Techniques to Simultaneously Configure Multiple AAA Profiles ( E.g., Two-Factor)5 pages of practice
Objective 2.10 Explain How to Configure SSO Profiles (e.g., HTTP Basic, NTLM, KERBEROS, SAML, Forms)7 pages of practice
Objective 2.11 Explain How to Configure SAML Use Cases (e.g., IDP, SP, IDP-initiated, SP-initiated)1 page of practice
Objective 2.12 Describe How to Add and Remove Client and Machine Certificates2 pages of practice
Objective 2.13 Determine Appropriate Deployment Option(s) to Meet Network Access Requirements (e.g., Standalone Edge Client, Browser Components, Mobile Apps)3 pages of practice
Objective 2.14 Explain How to Configure Access Methods (e.g., Network [SNAT vs. Routed Mode], Portal [rewrite Options], Application, App Tunnel, LTM+APM)5 pages of practice
Objective 2.15 Determine Appropriate Access Methods (e.g., Network, Portal, Application, LTM+APM) to Meet Requirements5 pages of practice
Objective 2.16 Explain How to Configure and Assign ACLs (e.g., L4, L7, Static, Dynamic, Default Action, iRule Events, Logging Options)3 pages of practice
Objective 2.17 Identify Resource Types for Which Associated ACLs Are Automatically Created (e.g., Remote Desktop, Portal Access, Application Tunnels)1 page of practice
Objective 2.18 Describe the ACL Action Types and Their Functions (e.g., Allow, Continue, Discard, Reject)3 pages of practice
Objective 2.19 Describe Methods to Map Microsoft Active Directory Groups to Assigned Resources6 pages of practice
Objective 2.20 Explain the Use of APM Session Variables (e.g., Session Flow, Use in iRules, Variable Assign Policy Item)6 pages of practice
Objective 2.21 Explain Access Policy Flow and Logic (i.e., Branching, Loops, Macros [when and How to Use Them])4 pages of practice
Objective 2.22 Describe the Use and Configuration of Endpoint Checks (e.g., Registry Check, Process Check, Windows Info, Machine Cert Auth)5 pages of practice
Objective 2.23 Describe Customization Options for an Access Policy (logon Page, Webtop, Network Access, Language)3 pages of practice

← Previous pagePage 7 of 7Next page →

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.