Objective 2.20 Explain the Use of APM Session Variables (e.g., Session Flow, Use in iRules, Variable Assign Policy Item) 304 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   An access policy uses an iRule event item to run an iRule that sets a session variable. The iRule needs to read a value from the HTTP request URI. The administrator wants to ensure the iRule has access to the request data. Which event should the iRule use within the iRule event item?

   • ACLIENT_ACCEPTED
   • BACCESS_POLICY_COMPLETED
   • CACCESS_POLICY_AGENT_EVENT
   • DHTTP_REQUEST
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is the primary purpose of APM session variables in the context of an access policy?

   • ATo maintain state and share data across different policy items and iRules during a user's access session
   • BTo store user credentials securely for the duration of the session
   • CTo store configuration settings for the APM module that persist across system restarts
   • DTo define global constants that can be referenced by any access policy on the BIG-IP system
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In the Visual Policy Editor (VPE), which policy item allows you to directly set or modify session variables?

   • AAD Query
   • BVariable Assign
   • CLogon Page
   • DHTTP Response
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An administrator is creating a new access policy and needs to store a custom value that identifies the user's region. The value will be used by multiple VPE items and iRules. Which session variable name should the administrator use?

   • Asession.region
   • Bsession.custom.region
   • Csession.oauth.region
   • Dsession.adp.region
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is migrating from a legacy VPN to BIG-IP APM. The current access policy authenticates users with AD and then checks a session variable session.custom.vpn_group to determine which network ACL to apply. The migration requires that the session variable be set based on a new attribute from the AD server, 'memberOf'. The administrator wants to minimize changes to the existing policy structure. What is the most efficient modification?

   • AAdd a new authentication item to retrieve the 'memberOf' attribute and then add a new Variable Assign item.
   • BCreate a new session variable session.custom.new_vpn_group and update all references in the policy.
   • CReplace the Variable Assign item with an iRule event item that sets the variable.
   • DModify the existing Variable Assign item that sets session.custom.vpn_group to use the AD 'memberOf' attribute as the source.
   Reveal Solution Discussion Select an answer first