Objective 2.20 Explain the Use of APM Session Variables (e.g., Session Flow, Use in iRules, Variable Assign Policy Item) 304 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   When configuring an iRule event policy item, what must you specify?

   • AThe name of the iRule to execute
   • BThe virtual server to attach the iRule to
   • CThe event name that the iRule will listen for
   • DThe priority of the iRule
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A BIG-IP APM administrator has an access policy that authenticates users. After authentication, the policy needs to run a custom iRule that checks a session variable and modifies another session variable based on the result. The iRule must execute at a specific point in the policy flow, after authentication but before the final access grant. Which VPE item should be used to trigger this iRule?

   • AiRule event item placed after the authentication item in the policy.
   • BLogon Page item with an iRule attached to its properties.
   • CAn iRule attached directly to the virtual server that checks the session variable.
   • DVariable Assign item configured to call the iRule.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   An administrator is designing an access policy that must set a session variable based on a value from an external database. The database query is performed by an iRule. The administrator needs to ensure the session variable is set before the policy continues to the next item. What is the correct approach?

   • AUse a Logon Page item to query the database and set the session variable.
   • BUse an iRule event item that runs the database query and sets the session variable, then continues the policy.
   • CUse a virtual server iRule on HTTP_REQUEST to query the database and set the session variable.
   • DUse a Variable Assign item to query the database directly.
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company is deploying BIG-IP APM for a new employee portal. The access policy must capture the employee's department from an Active Directory attribute during authentication and then use that value later in the policy to route users to different landing pages. The administrator wants to store this value in a session variable that will persist for the entire user session. Which approach should the administrator use?

   • AAdd a Logon Page item and configure it to write the department attribute directly to session.adp.department.
   • BConfigure the AD authentication item's properties to automatically store all returned attributes in session.oauth.
   • CUse an iRule event item to read the AD attribute and write it to a local iRule variable only.
   • DAdd a Variable Assign item after the AD authentication item, setting session.custom.department to the AD attribute value.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the primary function of the Variable Assign policy item in an access policy?

   • ATo evaluate a condition and branch the policy
   • BTo set or modify session variables during the access policy flow
   • CTo redirect users to a different URL
   • DTo authenticate users against an external identity provider
   Reveal Solution Discussion Select an answer first