Objective 4.03 Interpret an HTTP Protocol Trace Collected with a Client Side Tool (e.g., HTTPWatch, Fiddler, Paros, Live Headers) 304 Practice Questions (Page 3)

Questions 11–14

1. 11application · medium

   An administrator is troubleshooting a Kerberos SSO configuration for an APM-protected web application. The user successfully authenticates to the access policy, but the application returns a 401. In an HTTPWatch trace, the administrator sees a request to the application with an 'Authorization' header that starts with 'Negotiate'. What is the most likely cause of the 401?

   • AThe SSO configuration is set to header-based instead of Kerberos.
   • BThe user's browser does not support Kerberos authentication.
   • CThe application is not configured to accept Kerberos authentication.
   • DThe APM session cookie was not sent with the request, so the SSO token was not generated.
   Reveal Solution Discussion Select an answer first
2. 12expert · medium

   An administrator is troubleshooting an APM-protected application where users are intermittently redirected to the access policy. In an HTTPWatch trace, the administrator sees a request to the application URL with a 302 response to /my.policy. The request headers include a session cookie, but the response headers include a 'Location' header of 'https://apm.example.com/my.policy?session=expired'. What is the most likely cause?

   • AThe application is redirecting the user to the access policy because it does not recognize the session.
   • BThe user's browser is blocking the APM session cookie.
   • CThe BIG-IP is configured to use a short session timeout.
   • DThe session has expired, and APM is redirecting the user to the access policy with a reason code.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An APM administrator is configuring header-based SSO for a web application. The application expects a custom header named 'X-User' to contain the username. In an HTTPWatch trace, the administrator sees a request to the application with the 'X-User' header present, but the application still prompts for credentials. What is the most likely cause?

   • AThe 'X-User' header is not being sent on every request to the application.
   • BThe SSO configuration is set to forms-based instead of header-based.
   • CThe application expects the header to be named 'X-Username' instead of 'X-User'.
   • DThe APM session cookie was not sent with the request, so the SSO token was not generated.
   Reveal Solution Discussion Select an answer first
5. 14foundation · medium

   A technician uses HTTPWatch to capture a session where a user accesses a web application through BIG-IP APM. Which element is a key trace element that HTTPWatch records for each HTTP request?

   • AThe client's operating system version
   • BThe request method and URL
   • CThe server's physical rack location
   • DThe user's keyboard input
   Reveal Solution Discussion Select an answer first