BIG-IP APM Specialist Free Sample Questions

A financial organization is deploying a new web application through BIG-IP APM and requires stringent protection against cookie hijacking. The security team mandates that session cookies must not be accessible via client-side scripts and must only be transmitted over encrypted channels. Which combination of APM cookie settings will fulfill these requirements?

An e-commerce company is experiencing a brute-force credential stuffing attack targeting their APM-protected customer portal. The attackers are using a highly distributed botnet, making traditional IP blocking ineffective. Which BIG-IP APM feature or integration should the security architect deploy to most effectively mitigate this specific attack methodology?

A multinational corporation is consolidating its employee portals. They have three distinct web applications hosted on different subdomains: app1.corp.com, app2.corp.com, and hr.corp.com.

The organization requires that users only authenticate once when accessing any of these applications. If a user logs into app1.corp.com, they must seamlessly access hr.corp.com without being prompted for credentials again. The security team insists that session data must not be passed via URL parameters for security reasons.

As the APM Specialist, you must design an architecture that supports this requirement while utilizing APM's native capabilities. Which approach provides the optimal solution for this scenario?

A healthcare provider mandates that any external device connecting to their internal network must have an updated antivirus software and the corporate registry key present. If these conditions are not met, the user should only be granted access to a restricted web portal. Which combination of APM components is required to enforce this policy?

An organization requires remote access solutions for different user groups. Contractors need access to a specific internal web application without installing any client software. IT administrators require full Layer 3 access to manage servers. Which TWO access methods are most appropriate for these respective use cases? (Select TWO)

A company is integrating BIG-IP APM with their existing VMware Horizon View environment to securely proxy remote desktop connections. What role does APM play in this specific architecture?