When configuring an auth and/or query object in VPE, what can you use it for?

Question

Options

• ATo configure required attributes for SSL certificate validation
• BTo determine user group membership during authentication
• CTo optimize application traffic for specific users
• DTo configure load balancing settings for the ADC

• B
  89% (17)
• C
  5% (1)
• D
  5% (1)

Explanation

In F5 BIG-IP's Visual Policy Editor (VPE), auth and query objects are used to authenticate users against directory services (like Active Directory or LDAP) and retrieve attributes - most critically, group membership - which then drives authorization decisions within the access policy. This makes B correct: the query object fetches group data, and the auth object validates credentials, together determining what a user is allowed to access.

Why the distractors are wrong:

• A is incorrect because SSL certificate validation is handled through SSL profiles in LTM, not through VPE auth/query objects.
• C is incorrect because traffic optimization for specific users falls under iRules or traffic policies, not VPE authentication objects.
• D is incorrect because load balancing is an LTM/ADC function configured in virtual server or pool settings, entirely separate from the APM policy layer.

Memory tip: Think of auth/query objects as the "Who are you, and what groups do you belong to?" step in a policy - authentication confirms identity, and the query checks group membership to decide what that identity can access.

No community discussion yet for this question.