Objective 2.20 Explain the Use of APM Session Variables (e.g., Session Flow, Use in iRules, Variable Assign Policy Item) 304 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An access policy has multiple branches that set different values for session.custom.access_level. After the branches converge, a Variable Assign item needs to check the current value of session.custom.access_level and set a new variable session.custom.permission based on it. What is the most efficient way to accomplish this in the VPE?

   • AAdd separate Variable Assign items for each possible value of session.custom.access_level, placed in parallel branches.
   • BModify each branch to also set session.custom.permission directly.
   • CUse an iRule event item to read session.custom.access_level and write session.custom.permission.
   • DUse a Variable Assign item with multiple assignment rules that check the value of session.custom.access_level and set session.custom.permission accordingly.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An access policy for a partner portal has a Variable Assign item that sets session.custom.tier to 'gold' for some users. Later in the same policy, a second Variable Assign item must change this value to 'platinum' for a specific group of users. What is the correct way to modify the existing session variable in the second Variable Assign item?

   • AUse a Logon Page item to update the session.custom.tier variable.
   • BAdd a new variable assignment that references session.custom.tier and sets its value to 'platinum'.
   • CCreate a new session variable session.custom.tier2 with the value 'platinum'.
   • DDelete the first Variable Assign item and create a new one that sets the value to 'platinum' for all users.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An access policy needs to run a custom iRule that reads a session variable and logs a message if the variable matches a specific value. The iRule should only run once per session, after authentication. Which VPE item and configuration is appropriate?

   • AAttach the iRule to the virtual server and use the ACCESS_POLICY_AGENT event.
   • BUse a Logon Page item and attach the iRule to its success branch.
   • CAdd an iRule event item after authentication and configure it to run the custom iRule.
   • DAdd a Variable Assign item and configure it to execute the iRule.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A BIG-IP APM administrator is building an access policy that includes a Logon Page. The administrator needs to pre-populate a field on the Logon Page with a value from a session variable that was set earlier in the policy. How can the administrator reference the session variable in the Logon Page configuration?

   • AAdd a Variable Assign item before the Logon Page to copy the value to a static field.
   • BWrite an iRule that modifies the Logon Page HTML directly.
   • CStore the value in session.adp and reference it with ${session.adp.username}.
   • DUse the variable name in the Logon Page's field properties, such as %{session.custom.username}.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is updating its access policy to support two-factor authentication. Currently, the policy uses only AD authentication. The new requirement is that users must first authenticate with AD, then provide a one-time password (OTP) from a RADIUS server. The administrator needs to modify the access policy to meet this requirement. What is the correct policy modification?

   • AReplace the AD authentication item with a RADIUS authentication item.
   • BAdd a Variable Assign item to store the OTP and then use it for authentication.
   • CConfigure the AD authentication item to also validate the OTP.
   • DAdd a RADIUS authentication item after the existing AD authentication item in the policy.
   Reveal Solution Discussion Select an answer first