Explain Options for Remote Authentication Provider F5CAB4 Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company has a BIG-IP that needs to authenticate administrators using a centralized authentication service. The security team requires that the authentication protocol encrypt the entire packet and support per-command authorization. The company already has a RADIUS server in place. What should the administrator do?

   • ADeploy a TACACS+ server and configure BIG-IP to use it.
   • BConfigure BIG-IP to use LDAP with LDAPS.
   • CConfigure BIG-IP to use the existing RADIUS server.
   • DUse local authentication on the BIG-IP.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   When a user attempts to log in to BIG-IP and multiple authentication sources are configured, in what order does BIG-IP attempt authentication?

   • AAll sources are tried simultaneously and the first response wins.
   • BIn the order the sources are listed in the authentication configuration.
   • CLocal authentication is always attempted first.
   • DThe remote provider with the highest IP address is tried first.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A BIG-IP is configured to use an LDAP server for authentication. The administrator wants to test the LDAP configuration without affecting the production environment. What is the best way to do this?

   • ATemporarily change the authentication profile to use local authentication.
   • BRestart the BIG-IP to apply the new configuration.
   • CUse the BIG-IP's built-in LDAP test tool in the configuration utility.
   • DCreate a new VLAN for testing.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A BIG-IP is configured to use a RADIUS server for authentication. The administrator notices that authentication works, but the BIG-IP logs show 'RADIUS server response received with invalid signature'. What is the most likely cause?

   • AThe RADIUS server is unreachable.
   • BThe user's password is incorrect.
   • CThe shared secret on the BIG-IP does not match the one on the RADIUS server.
   • DThe RADIUS server is using a different port than expected.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A BIG-IP is configured to use an LDAP server for authentication. Users can log in, but the BIG-IP logs show 'LDAP bind failed' errors for some users. What is the most likely cause?

   • AThe LDAP server is configured with the wrong port.
   • BThe users' passwords are incorrect or expired.
   • CThe BIG-IP is using the wrong encryption method.
   • DThe LDAP server is unreachable.
   Reveal Solution Discussion Select an answer first