Explain Benefits of an Application Delivery Controller F5CAB2 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company has multiple applications, each with its own security requirements. The security team wants to enforce a consistent access-control policy (e.g., require multi-factor authentication for all admin URLs) across all applications, without modifying each application's code. Which BIG-IP feature is best suited for this?

   • AConfigure each web server to require MFA for admin URLs.
   • BUse iRules to redirect all admin URLs to a separate authentication server.
   • CUse Access Policy Manager (APM) to create a centralized access policy and apply it to virtual servers.
   • DEnable SSL offloading and rely on the network firewall to enforce access control.
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A company is concerned about DDoS attacks targeting their web application. They want to mitigate volumetric attacks (e.g., SYN floods) and also protect against application-layer attacks. They have a BIG-IP in front of their servers. Which combination of features should they use?

   • AEnable SYN cookie protection and configure an ASM/Advanced WAF policy.
   • BEnable SSL offloading and compression to reduce the impact of attacks.
   • CUse iRules to rate-limit all incoming traffic to a fixed number of requests per second.
   • DConfigure a load-balancing algorithm that distributes attack traffic evenly across all servers.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An organization has multiple BIG-IP devices across different data centers, each managing several applications. The security team wants to enforce a consistent WAF policy across all applications and ensure that any policy change is rolled out uniformly. Which approach best leverages the ADC's centralized management capabilities?

   • AUse BIG-IQ or a centralized management platform to manage and deploy WAF policies to all BIG-IP devices.
   • BCreate a separate WAF policy for each application and apply them locally on each device.
   • CUse iRules to enforce WAF policies on each device independently.
   • DManually configure the WAF policy on each BIG-IP device to ensure consistency.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   What is a direct benefit of load balancing for application availability?

   • AIt allows the application to remain accessible even if one server fails
   • BIt reduces the number of users that can access the application
   • CIt guarantees that no server will ever fail
   • DIt eliminates the need for backups
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which statement best describes the role of an application delivery controller (ADC) in modern application delivery?

   • AIt is a device that distributes and optimizes traffic to application servers while providing services like security and acceleration.
   • BIt acts as a network switch that forwards packets based on MAC addresses.
   • CIt is a firewall that only filters traffic based on IP addresses and ports.
   • DIt replaces the need for a web server by hosting application content directly.
   Reveal Solution Discussion Select an answer first