nerdexam
F5

201 · Question #207

A BIG-IP Administrator configures remote authentication and needs to make sure that users can still login even when the remote authentication server is unavailable. Which action should the BIG-IP Admi

The correct answer is B. Enable the Fallback to Local option. The administrator needs to ensure users can log in even if the remote authentication server is unavailable, requiring a backup authentication mechanism.

Section 3: Administer a BIG-IP Device

Question

A BIG-IP Administrator configures remote authentication and needs to make sure that users can still login even when the remote authentication server is unavailable. Which action should the BIG-IP Administrators in the remote authentication configuration to meet this requirement?

Options

  • ASet partition access to "All"
  • BEnable the Fallback to Local option
  • CConfigure a remote role grove
  • DConfigure a second remote user directory

How the community answered

(53 responses)
  • B
    94% (50)
  • C
    2% (1)
  • D
    4% (2)

Why each option

The administrator needs to ensure users can log in even if the remote authentication server is unavailable, requiring a backup authentication mechanism.

ASet partition access to "All"

Setting partition access to 'All' defines resource access permissions after authentication, not the authentication method itself or its availability.

BEnable the Fallback to Local optionCorrect

Enabling the 'Fallback to Local' option in the remote authentication configuration allows the BIG-IP system to attempt authentication against its local user database if the primary remote authentication server becomes unreachable or unresponsive, ensuring continued login access.

CConfigure a remote role grove

Configuring a remote role (assuming 'grove' is a typo) defines authorization roles, not a failover mechanism for authentication server unavailability.

DConfigure a second remote user directory

Configuring a second remote user directory might provide redundancy, but it does not guarantee login access if connectivity to all remote directories is lost; a local fallback is a more robust solution for server unavailability.

Concept tested: F5 BIG-IP remote authentication fallback

Source: https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-system-administration/configuring-remote-authentication.html

Topics

#remote authentication#fallback to local#authentication resilience

Community Discussion

No community discussion yet for this question.

Full 201 Practice