Explain Use of Groups Using Remote Authentication Provider F5CAB4 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   In F5 BIG-IP, when using a remote authentication provider, how are groups typically defined for administrative access?

   • AGroups are defined on the remote authentication server and referenced by name in the BIG-IP configuration.
   • BGroups are defined as IP address ranges in the remote authentication provider configuration.
   • CGroups are defined locally on the BIG-IP and matched by name to groups in the remote authentication response.
   • DGroups are defined in the BIG-IP user database and synchronized to the remote authentication server.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company uses Active Directory as its remote authentication provider for BIG-IP administration. The security team wants to grant read-only access to a group of junior network engineers, but the Active Directory group they belong to is named 'Network-Operators'. The BIG-IP administrator has already configured the remote authentication provider and wants to map this AD group to the built-in 'operator' role. What must the administrator do in the BIG-IP configuration?

   • ACreate a local BIG-IP user account for each junior engineer and assign the 'operator' role.
   • BRename the Active Directory group to 'operator' so it matches the built-in role.
   • CAssign the 'operator' role directly to the 'Network-Operators' group in the BIG-IP local user database.
   • DAdd a group mapping entry that matches 'Network-Operators' and assigns the 'operator' role.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   When configuring a remote authentication provider on F5 BIG-IP, what is the first step to enable group support?

   • AEnable the 'Group Support' checkbox in the BIG-IP system settings.
   • BInstall a certificate on the BIG-IP for the remote authentication server.
   • CCreate the authentication provider and specify the remote server details.
   • DAssign administrative roles to the groups in the BIG-IP user database.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   An administrator is configuring a TACACS+ remote authentication provider. The TACACS+ server is configured to return the group 'Network-Engineers'. The administrator wants to map this group to the 'operator' role. Where in the BIG-IP configuration is this mapping defined?

   • AIn the TACACS+ server's configuration file.
   • BIn the BIG-IP system's DNS settings.
   • CIn the TACACS+ provider configuration, under the group mapping section.
   • DIn the BIG-IP local user database.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A BIG-IP administrator is using an LDAP remote authentication provider. A user is a member of two groups: 'F5-Admins' and 'F5-Viewers'. The administrator has mapped 'F5-Admins' to 'admin' and 'F5-Viewers' to 'operator'. What role will the user receive?

   • AA custom role that combines both permissions.
   • BThe 'operator' role, because it is the last one mapped.
   • CNo role, because the user is in multiple groups.
   • DThe 'admin' role, because it is the most permissive role mapped.
   Reveal Solution Discussion Select an answer first