Explain Use of Groups Using Remote Authentication Provider F5CAB4 Practice Questions (Page 5)

Questions 21–23

1. 21application · medium

   An administrator is configuring an LDAP remote authentication provider for BIG-IP. The LDAP directory uses a nested group structure where 'F5-Admins' is a member of 'Network-Admins'. The administrator wants users in 'Network-Admins' to have the 'admin' role. What must be done in the BIG-IP configuration to ensure nested group membership is considered?

   • AEnable the option to check nested groups in the LDAP provider configuration.
   • BConfigure the LDAP server to flatten the group hierarchy.
   • CCreate a mapping for both 'F5-Admins' and 'Network-Admins' to the 'admin' role.
   • DAdd the 'Network-Admins' group to the local BIG-IP group list.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A company uses a remote authentication provider for BIG-IP. The administrator wants to grant a user 'auditor' access, which is a custom role. The user is in the 'Security-Auditors' group in the remote directory. How should the administrator configure this?

   • AMap the 'Security-Auditors' group to the 'auditor' role in the remote authentication provider.
   • BAdd the 'auditor' role to the remote directory group's attributes.
   • CCreate a local user account for the user and assign the 'auditor' role.
   • DAssign the 'admin' role to the group and restrict access via partitions.
   Reveal Solution Discussion Select an answer first
3. 23foundation · easy

   What is the benefit of using group-based access control over individual user-based access control in F5 BIG-IP?

   • AIt reduces the administrative overhead of managing permissions for many users.
   • BIt allows users to self-assign roles based on their needs.
   • CIt increases the security of the BIG-IP by encrypting all administrative traffic.
   • DIt eliminates the need for a remote authentication server.
   Reveal Solution Discussion Select an answer first