Sign in

Free 304 sample questions

Real questions from the BIG-IP APM Specialist practice bank, with the correct answer and an explanation for each one. No junk, no filler.

Try them in the simulator Same questions, with study, timed and flashcard modes.

Showing 6 of 12 free sample questions.

Question 1Choose one

An e-commerce company is experiencing a brute-force credential stuffing attack targeting their APM-protected customer portal. The attackers are using a highly distributed botnet, making traditional IP blocking ineffective. Which BIG-IP APM feature or integration should the security architect deploy to most effectively mitigate this specific attack methodology?

Question 2Choose one

A multinational corporation is consolidating its employee portals. They have three distinct web applications hosted on different subdomains: app1.corp.com, app2.corp.com, and hr.corp.com. The organization requires that users only authenticate once when accessing any of these applications. If a user logs into app1.corp.com, they must seamlessly access hr.corp.com without being prompted for credentials again. The security team insists that session data must not be passed via URL parameters for security reasons. As the APM Specialist, you must design an architecture that supports this requirement while utilizing APM's native capabilities. Which approach provides the optimal solution for this scenario? flowchart TD User([User Browser]) -->|1. Access app1.corp.com| VS1[VS: app1.corp.com] VS1 -->|2. Authenticate & Issue Cookie| User User -->|3. Access hr.corp.com| VS2[VS: hr.corp.com] VS2 -->|4. Validate Token| AuthHost[Auth Host: login.corp.com]

Question 3Choose one

A healthcare provider mandates that any external device connecting to their internal network must have an updated antivirus software and the corporate registry key present. If these conditions are not met, the user should only be granted access to a restricted web portal. Which combination of APM components is required to enforce this policy?

Question 4Choose 2

An organization requires remote access solutions for different user groups. Contractors need access to a specific internal web application without installing any client software. IT administrators require full Layer 3 access to manage servers. Which TWO access methods are most appropriate for these respective use cases? (Select TWO)

Question 5Choose one

A company is integrating BIG-IP APM with their existing VMware Horizon View environment to securely proxy remote desktop connections. What role does APM play in this specific architecture?

Question 6Choose one

Setting the APM access policy logging level to 'Debug' is recommended for normal production operations because it provides maximum visibility without impacting system performance.

6 more free samples are waiting

Create a free account to unlock the whole 304 sample bank, or get full access to all 150 practice questions in the simulator.

Create account