Free 402 sample questions

Correct answer: Security Assertion Markup Language (SAML) 2.0

SAML 2.0 is the standard federation protocol used for web-based Single Sign-On (SSO) where the BIG-IP acts as the Service Provider (SP) and Azure AD acts as the Identity Provider (IdP). While LDAP and RADIUS can be used for authentication, they do not facilitate the standard browser-based redirection federation flow required by modern cloud IAM integrations like Azure AD SSO.

Correct answers: It requires a global server load balancing (GSLB) mechanism, such as BIG-IP DNS, to dynamically steer traffic to the cloud environment when on-premises thresholds are exceeded.; It relies on dynamic infrastructure provisioning via APIs or templates to spin up cloud resources on-demand.

Application bursting fundamentally requires a mechanism to detect capacity limits in the primary data center and seamlessly steer new client requests to the secondary cloud environment. BIG-IP DNS (GSLB) achieves this using metrics like virtual server connections or available pool members.

To be cost-effective, cloud bursting utilizes dynamic provisioning (via APIs, AWS Auto Scaling, or templates) to instantiate resources only when the burst occurs, rather than paying for idle compute continuously.

Correct answer: False

False. In a SaaS model, the cloud provider manages the entire stack, including the underlying infrastructure, operating systems, application frameworks, and the application software itself. The customer is typically only responsible for user data and access management.

Correct answer: Global Availability with the on-premises virtual server configured with a connection limit, placing it as the primary pool member.

In a cloud bursting scenario, Global Availability is often used. The on-premises virtual server is prioritized as the primary pool member. By setting a hard connection limit on the LTM virtual server, BIG-IP DNS will detect when this limit is reached (or when it goes offline due to capacity) and automatically fall back to the secondary pool member (the AWS environment).

Correct answer: OAuth 2.0 Client Credentials Grant

The OAuth 2.0 Client Credentials grant type is specifically designed for machine-to-machine (M2M) communications where no user interaction is possible. It allows the GCP application to request a short-lived access token using its own client identity to interact securely with the BIG-IP REST API. SAML is designed for human browser-based SSO.

Correct answer: Public cloud SDNs block Gratuitous ARP (GARP) and MAC masquerading.

Traditional F5 BIG-IP HA relies on Gratuitous ARP (GARP) and MAC masquerading to quickly move IP addresses between physical interfaces during a failover. Public cloud SDNs (like AWS, Azure, GCP) use strict mapping of IP addresses to ENIs/vNICs and drop unauthorized GARP broadcasts. Therefore, F5 requires Cloud Failover Extension (CFE) to make API calls to the cloud provider to update route tables or IP associations.