201 · Question #207
A BIG-IP Administrator configures remote authentication and needs to make sure that users can still login even when the remote authentication server is unavailable. Which action should the BIG-IP Admi
The correct answer is B. Enable the Fallback to Local option. The administrator needs to ensure users can log in even if the remote authentication server is unavailable, requiring a backup authentication mechanism.
Question
A BIG-IP Administrator configures remote authentication and needs to make sure that users can still login even when the remote authentication server is unavailable. Which action should the BIG-IP Administrators in the remote authentication configuration to meet this requirement?
Options
- ASet partition access to "All"
- BEnable the Fallback to Local option
- CConfigure a remote role grove
- DConfigure a second remote user directory
How the community answered
(53 responses)- B94% (50)
- C2% (1)
- D4% (2)
Why each option
The administrator needs to ensure users can log in even if the remote authentication server is unavailable, requiring a backup authentication mechanism.
Setting partition access to 'All' defines resource access permissions after authentication, not the authentication method itself or its availability.
Enabling the 'Fallback to Local' option in the remote authentication configuration allows the BIG-IP system to attempt authentication against its local user database if the primary remote authentication server becomes unreachable or unresponsive, ensuring continued login access.
Configuring a remote role (assuming 'grove' is a typo) defines authorization roles, not a failover mechanism for authentication server unavailability.
Configuring a second remote user directory might provide redundancy, but it does not guarantee login access if connectivity to all remote directories is lost; a local fallback is a more robust solution for server unavailability.
Concept tested: F5 BIG-IP remote authentication fallback
Source: https://techdocs.f5.com/en-us/bigip-15-0-0/big-ip-system-administration/configuring-remote-authentication.html
Topics
Community Discussion
No community discussion yet for this question.