Explain Use of Groups Using Remote Authentication Provider F5CAB4 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How are groups used to control administrative access in F5 BIG-IP?

   • ABy requiring group members to use a special VPN to access the BIG-IP.
   • BBy restricting access to specific IP addresses for each group.
   • CBy assigning administrative roles to groups, and users inherit those roles based on their group membership.
   • DBy creating a separate login page for each group.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   In the F5 BIG-IP configuration for an LDAP authentication provider, where do you specify the group attribute that contains the user's group membership?

   • AIn the 'User Attribute' field within the LDAP provider configuration.
   • BIn the 'Server Type' field within the LDAP provider configuration.
   • CIn the 'Base DN' field within the LDAP provider configuration.
   • DIn the 'Group Attribute' field within the LDAP provider configuration.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   An administrator is configuring a new LDAP remote authentication provider. They have added the LDAP server details and the base DN. What is the next step to enable group-based access control?

   • AConfigure the group membership attribute and the group-to-role mappings.
   • BCreate local user accounts for the administrators.
   • CReboot the BIG-IP device to apply the configuration.
   • DTest the connection by authenticating a user.
   Reveal Solution Discussion Select an answer first
5. 14expert · hard

   An organization uses a RADIUS server for BIG-IP authentication. The RADIUS server returns a group attribute, but the attribute name is 'Filter-Id' instead of the standard 'Group' attribute. The BIG-IP administrator has configured the provider but group mappings are not working. What is the most likely issue?

   • AThe RADIUS server is not sending the 'Filter-Id' attribute.
   • BThe RADIUS provider is not compatible with the 'Filter-Id' attribute.
   • CThe BIG-IP RADIUS provider is not configured to use the 'Filter-Id' attribute for group mapping.
   • DThe group mappings are case-sensitive and the case is wrong.
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   An organization is implementing a new BIG-IP administration model. They want to use their existing RADIUS infrastructure for authentication. The RADIUS server currently only authenticates users and does not return any group information. The administrator needs to assign different roles to different users. What is the simplest approach to achieve this?

   • AConfigure the RADIUS server to return a group attribute and then map that group to a role.
   • BUse the RADIUS username to map to a role in BIG-IP.
   • CAssign the 'admin' role to all users who authenticate via RADIUS.
   • DCreate a local user account for each administrator and assign roles individually.
   Reveal Solution Discussion Select an answer first