F5 BIG-IP APM Specialist - 304 Exam Questions [2026]

QUESTION NO: 1
When validating connectivity to an LDAP server, which command-line tool can be used on BIG-IP APM to perform an LDAP search and retrieve information from the server?

A. adtest B. radiusd C. ldapsearch D. authd

Correct Answer: C

QUESTION NO: 2
Which features of BIG-IP APM should be used to mitigate a specific authentication attack targeting user credentials? (Select all that apply)

A. Session cookies B. Application Layer DoS protection C. Endpoint Security checks D. Secure Web Gateway (SWG)

Correct Answer: A,C

QUESTION NO: 3
When updating an existing license for BIG-IP APM, what should be considered to ensure a smooth license upgrade process?

A. The access policy configurations in the existing license B. The number of client devices connecting to the BIG-IP device C. The version of the BIG-IP software currently installed D. The number of virtual servers deployed on the BIG-IP device

Correct Answer: C

QUESTION NO: 4
Which access policy item allows querying an external LDAP directory for authentication?

A. AD Auth B. LDAP Auth C. RADIUS Auth D. OCSP Auth

Correct Answer: B

QUESTION NO: 5
When configuring a VPE flow with multiple branches and objects, what is the purpose of variable assignment?

A. To configure SSL certificate settings for secure logon B. To optimize application performance for specific users C. To define custom session variables for each user D. To manage application-specific ACLs

Correct Answer: C

QUESTION NO: 6
What is the key difference between transparent and explicit proxy deployments in Secure Web Gateway (SWG)?

A. Transparent proxy is suitable for encrypted traffic, while explicit proxy is limited to HTTP traffic. B. Transparent proxy does not require user configuration, while explicit proxy requires user settings. C. Transparent proxy requires client-side installation, while explicit proxy is fully server-side. D. Transparent proxy provides faster performance, while explicit proxy offers better security.

Correct Answer: B

QUESTION NO: 7
How can you identify user session details in BIG-IP APM?

A. By inspecting the APM log files on the BIG-IP device B. By reviewing session reports generated by the BIG-IP device C. By querying the BIG-IP database for session information D. By analyzing TCP/UDP ports used for application services

Correct Answer: B

QUESTION NO: 8
In Citrix ADC, what is the purpose of adding an appropriate logon page type?

A. To configure SSL certificate settings for secure logon B. To display custom messages during the authentication process C. To customize the look and feel of the logon page for end-users D. To redirect users to a specific webpage after successful authentication

Correct Answer: C