Objective 4.03 Interpret an HTTP Protocol Trace Collected with a Client Side Tool (e.g., HTTPWatch, Fiddler, Paros, Live Headers) 304 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A user reports that an APM-protected application is slow to load. An administrator captures the session with HTTPWatch and sees the following sequence: GET /my.policy (200), POST /my.policy (302), GET /application (200). The time between the POST and the GET to the application is 15 seconds. What is the most likely cause of the delay?

   • AThe browser is slow to process the 302 redirect from the POST.
   • BThe access policy is performing a slow authentication method, such as a database lookup or external authentication.
   • CThe network between the client and the BIG-IP is slow.
   • DThe application server is slow to respond to the GET request.
   Reveal Solution Discussion Select an answer first
2. 2foundation · medium

   Which SSO method for APM-delivered web applications is characterized by the client sending an Authorization header with a base64-encoded username and password?

   • AKerberos SSO
   • BForms-based SSO
   • CHeader-based SSO
   • DHTTP Basic SSO
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   An APM administrator is configuring SSO for a web application that uses header-based authentication. The application expects a custom header named 'X-Auth-User' to contain the username. In an HTTPWatch trace, the administrator sees a request to the application with the 'X-Auth-User' header present, but the application still prompts for credentials. The administrator also notices that the 'X-Auth-User' header is present in the response headers. What is the most likely cause?

   • AThe application is echoing the header back in the response, but it is not using it for authentication.
   • BThe SSO configuration is set to forms-based instead of header-based.
   • CThe application expects the header to be named 'X-User' instead of 'X-Auth-User'.
   • DThe APM session cookie was not sent with the request, so the SSO token was not generated.
   Reveal Solution Discussion Select an answer first
5. 4foundation · medium

   In an HTTPWatch trace, which column directly shows the HTTP status code returned by the server for each request?

   • ATime
   • BCache
   • CBytes
   • DStatus
   Reveal Solution Discussion Select an answer first
6. 5foundation · medium

   When interpreting an HTTPWatch trace, how can a technician identify the request/response pair for a specific resource, such as a login page?

   • ABy examining the server's hostname
   • BBy checking the browser's cache size
   • CBy matching the request URL with the response status code
   • DBy looking at the client's IP address
   Reveal Solution Discussion Select an answer first