A BIG-IP APM administrator is configuring an access policy for a public-facing application. The administrator wants to prevent attackers from using automated tools to guess passwords. The application uses forms-based authentication. Which APM feature should be enabled to mitigate this automated attack?

Configure the session cookie to be persistent.

Enable client certificate authentication.

Set a short session idle timeout.

Enable brute force protection on the virtual server.

What is the primary role of a session cookie in a web browser's interaction with an authentication system?

To maintain state and identify the user's session across HTTP requests

To encrypt all traffic between the browser and the server

To store the user's password for automatic login

To permanently store user preferences across browser restarts

A company is using BIG-IP APM to secure access to an internal application. The security policy requires that only company-issued laptops can access the application. The company wants to use a strong authentication method that does not require users to remember passwords. Which APM authentication method should be configured?

Multi-factor authentication using a software OTP.

Basic authentication with a long password.

Client certificate authentication.

Forms-based authentication with a strong password policy.

F5Certified Technology Specialist, BIG-IP APM

Domain 1Objective 2

Objective 1.02 Identify Which APM Tool(s) Should Be Used to Mitigate a Specific Authentication Attack 304 Practice Questions (Page 3)

Part of the Section 1: Assess security needs and requirements to create an APM policy domain, which makes up ~17% of our current practice bank. F5 does not publish an official question count, but from its 90-minute exam (~35–60 total, ~6–10 in this domain), expect 1–1 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

4concepts

Questions 11–15

11foundation · easy
An organization is experiencing repeated login attempts with many different passwords against a single user account. Which BIG-IP APM feature is specifically designed to detect and block this type of attack?
Select an answer first
12foundation · easy
Which attribute of a cookie, when set, helps protect against session hijacking by ensuring the cookie is only sent over HTTPS connections?
Select an answer first
13application · medium
A BIG-IP APM administrator is configuring an access policy for a public-facing application. The administrator wants to prevent attackers from using automated tools to guess passwords. The application uses forms-based authentication. Which APM feature should be enabled to mitigate this automated attack?
Select an answer first
14foundation · easy
What is the primary role of a session cookie in a web browser's interaction with an authentication system?
Select an answer first
15application · medium
A company is using BIG-IP APM to secure access to an internal application. The security policy requires that only company-issued laptops can access the application. The company wants to use a strong authentication method that does not require users to remember passwords. Which APM authentication method should be configured?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 304

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “304” is a trademark of its owner, used for identification only.

Objective 1.02 Identify Which APM Tool(s) Should Be Used to Mitigate a Specific Authentication Attack 304 Practice Questions (Page 3)

Questions 11–15

An organization is experiencing repeated login attempts with many different passwords against a single user account. Which BIG-IP APM feature is specifically designed to detect and block this type of attack?

Which attribute of a cookie, when set, helps protect against session hijacking by ensuring the cookie is only sent over HTTPS connections?

What is the primary role of a session cookie in a web browser's interaction with an authentication system?

Keep studying — Section 1: Assess security needs and requirements to create an APM policy