304 Exam Training Practice Tests (F5 BIG-IP APM Specialist)]

Question 1

When configuring a Kerberos SSO object, what is the primary requirement for the Service Principal Name (SPN)?

A. The SPN must be registered in Active Directory's Service Principal Name list. B. The SPN must be globally unique across all domains. C. The SPN must include the user's password for secure authentication. D. The SPN must contain the IP address of the Kerberos Key Distribution Center (KDC).

Correct Answer: A

Question 2

How do you configure "application access" in Citrix ADC?

A. By configuring ACLs in Global Access Control List (ACL) policies B. By setting up Resource Items for each application C. By creating virtual servers and configuring service bindings D. By defining traffic policies in the Application Firewall

Correct Answer: B

Question 3

What is the purpose of an Access Profile?

A. Apply iRules to traffic B. Configure SNAT behavior C. Encrypt client traffic D. Define user authentication and access rules

Correct Answer: D

Question 4

Which SSO type requires the configuration of attribute mapping to exchange user information between the IdP and SP?

A. SAML SSO B. RADIUS SSO C. RSA SecurID SSO D. Kerberos SSO

Correct Answer: A

Question 5

When deploying an iApp template, what is the significance of determining the min/max BIG-IP module versions supported?

A. To estimate the deployment time and resource requirements B. To guarantee the availability of specific features required by the iApp C. To ensure compatibility with the BIG-IP device hardware D. To prevent potential security vulnerabilities

Correct Answer: B

Question 6

Which of the following is NOT a component of Single Sign-On (SSO)?

A. AAA Server B. Assertion C. Identity Provider (IdP) D. Service Provider (SP)

Correct Answer: A

Question 7

How can you make manual changes to a deployed application service that uses an iApp? (Select all that apply)

A. By disabling strict updates temporarily and applying changes in the GUI B. By modifying the iApp template code directly C. By editing the application service settings in the BIG-IP Configuration Utility D. By restarting the BIG-IP device after making changes

Correct Answer: A,C

F5 BIG-IP APM Specialist - 304 Exam Practice Test