Explain Options for Remote Authentication Provider F5CAB4 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In BIG-IP, what is the purpose of the 'Fallback to Local' option when configuring a remote authentication provider?

   • AIt forces all users to authenticate locally before trying the remote provider.
   • BIt disables remote authentication entirely.
   • CIt allows local users to be authenticated if the remote provider is unavailable.
   • DIt requires the remote provider to authenticate local users.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which of the following is a common cause of remote authentication failure when using LDAP?

   • AIncorrect HTTP port
   • BIncorrect DNS server for the BIG-IP itself
   • CIncorrect SNMP community string
   • DIncorrect Base DN
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A BIG-IP administrator wants to ensure that if the remote RADIUS server becomes unreachable, administrators can still log in using locally defined accounts. What configuration should be applied?

   • AConfigure the RADIUS server with a high timeout value so it eventually times out and allows local login.
   • BSet the RADIUS server as the primary and configure a local authentication fallback in the authentication profile.
   • CCreate a second RADIUS server entry with the local BIG-IP IP address.
   • DEnable the 'local' option in the RADIUS server configuration.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   An organization uses a TACACS+ server for network device authentication. They want to configure BIG-IP to use this server for admin logins. During configuration, they need to specify the shared secret. What is the purpose of this shared secret?

   • AIt is used to generate a session key for the user's session.
   • BIt is used only to authenticate the BIG-IP to the TACACS+ server.
   • CIt encrypts the entire TACACS+ packet payload.
   • DIt is used to encrypt only the password field.
   Reveal Solution Discussion Select an answer first
6. 15expert · hard

   A BIG-IP is configured to use an LDAP server for authentication. The LDAP server is being migrated to a new IP address. The administrator updates the LDAP server configuration on the BIG-IP with the new IP address, but authentication still fails. The BIG-IP logs show 'Connection refused' errors. What is the most likely cause?

   • AThe BIG-IP is still using the old IP address due to a caching issue.
   • BThe new LDAP server is not listening on the expected port.
   • CThe LDAP server is using a different encryption method.
   • DThe LDAP server's shared secret is incorrect.
   Reveal Solution Discussion Select an answer first