Secure Password Policies F5CAB1 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   An administrator sets the password history to 5. What does this mean for a BIG-IP user?

   • AThe password must contain at least 5 characters
   • BThe user cannot reuse any of the last 5 passwords
   • CThe user must change the password every 5 days
   • DThe user is locked out after 5 failed attempts
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Why is it important to apply password policies to administrative accounts on BIG-IP?

   • ATo protect the management plane from unauthorized access
   • BTo enable SNMP monitoring
   • CTo improve network performance
   • DTo allow remote access via SSH
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   An administrator wants to lock an account for 30 minutes after 5 failed login attempts. Which two settings must be configured?

   • APassword complexity and minimum length
   • BLockout threshold and lockout duration
   • CAccount role and partition
   • DPassword expiration and password history
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   A BIG-IP administrator is configuring password policies for a multi-tenant environment where different departments have different security requirements. The finance department requires a minimum password length of 14 characters, while the IT department only requires 10 characters. The administrator wants to enforce these different policies without creating a complex management overhead. What is the most efficient approach?

   • AUse a single password policy with a minimum length of 14 characters for all users.
   • BCreate two separate password policies and apply them to the respective user groups for finance and IT.
   • CManually enforce the password length by changing each user's password periodically.
   • DUse a single password policy with a minimum length of 10 characters for all users.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A BIG-IP administrator is reviewing the password policy for the 'admin' account. The current policy has 'Password History' set to 5, 'Minimum Length' set to 8, and 'Maximum Age' set to 30 days. A security audit recommends increasing the password history to 10 and the minimum length to 12. The administrator is concerned that these changes might affect the ability of administrators to remember their passwords. What is the best course of action?

   • AKeep the current policy and document that the audit recommendations are not feasible.
   • BUpdate only the 'Minimum Length' to 12 and leave 'Password History' at 5.
   • CUpdate the password policy to set 'Password History' to 10 and 'Minimum Length' to 12.
   • DUpdate only the 'Password History' to 10 and leave 'Minimum Length' at 8.
   Reveal Solution Discussion Select an answer first