Secure Password Policies F5CAB1 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A security team is defining a password policy for BIG-IP administrative accounts. They have the following requirements: passwords must be at least 12 characters, must be changed every 60 days, and the last 5 passwords cannot be reused. However, they are concerned that enforcing all three requirements might be too restrictive for the administrators. What is the most appropriate action?

   • AConfigure the password policy with 'Minimum Length' = 12, 'Maximum Age' = 60 days, and 'Password History' = 5.
   • BConfigure 'Minimum Length' = 12 and 'Password History' = 5, but set 'Maximum Age' to 0 to disable expiration.
   • CConfigure only 'Minimum Length' = 12 and 'Maximum Age' = 60 days, and skip password history to reduce restrictiveness.
   • DConfigure 'Maximum Age' = 60 days and 'Password History' = 5, but set 'Minimum Length' to 8 to make it easier for admins.
   Reveal Solution Discussion Select an answer first
2. 7expert · hard

   A company has a policy that administrative passwords must be changed every 60 days. However, they have experienced issues where administrators forget to change their passwords and get locked out. To reduce this, they want to send a warning before the password expires. What is the best way to achieve this on BIG-IP?

   • ASet 'Lockout Threshold' to 60 and 'Lockout Duration' to 1 day.
   • BSet 'Maximum Age' to 60 days and manually remind administrators via email.
   • CSet 'Password History' to 60 to prevent reuse of old passwords.
   • DConfigure the 'Maximum Age' to 60 days and rely on the BIG-IP system to send a warning before expiration.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security audit reveals that an administrator has been alternating between two passwords for the BIG-IP 'admin' account. The auditor requires that the last 10 passwords cannot be reused. Which setting should be configured?

   • ASet 'Minimum Length' to 10.
   • BSet 'Lockout Threshold' to 10.
   • CSet 'Maximum Age' to 10 days.
   • DSet 'Password History' to 10.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company's security team has mandated that all BIG-IP administrative accounts must use passwords with at least 12 characters, including uppercase, lowercase, digits, and special characters. The BIG-IP administrator is configuring the password policy for the 'admin' account. Which configuration step is required to enforce this requirement?

   • AEnable the 'Lockout Policy' with a threshold of 12 failed attempts.
   • BSet the 'Minimum Length' to 12 and enable all complexity character class requirements in the password policy.
   • CSet the 'Password History' to remember the last 12 passwords.
   • DSet the 'Maximum Age' to 12 days to force the admin to change the password more frequently.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   What is the purpose of password aging on the BIG-IP system?

   • ATo enforce password complexity
   • BTo force periodic password changes
   • CTo prevent reuse of old passwords
   • DTo lock accounts after failed attempts
   Reveal Solution Discussion Select an answer first