The current status of a given pool is offline (red). Which condition could explain that state? Assume the descriptions below include all monitors assigned for each scenario.

The pool has a monitor assigned to it, and none of the pool members passed the test.

No monitors are currently assigned to any pool, member or node.

The pool has a monitor assigned to it, and none of the pool members passed the test.

The pool has a monitor assigned to it, and only some of the pool's members passed the test.

A monitor is assigned to all nodes and all nodes have passed the test. The pool's members have no specific monitor assigned to them.

Which three statements describe a characteristic of profiles? (Choose three.)

Default profiles cannot be created or deleted.

Custom profiles are always based on a parent profile.

A profile can be a child of one profile and a parent of another.

Default profiles cannot be created or deleted.

Custom profiles are always based on a parent profile.

A profile can be a child of one profile and a parent of another.

All changes to parent profiles are propagated to their child profiles.

While most virtual servers have at least one profile associated with them, it is not required.

How is persistence configured?

Persistence is a profile type; an appropriate profile is created and associated with virtual server.

Persistence is an option within each pool's definition.

Persistence is a profile type; an appropriate profile is created and associated with virtual server.

Persistence is a global setting; once enabled, loadbalancing choices are superceded by the persistence method that is specified.

Persistence is an option for each pool member. When a pool is defined, each member's definition includes the option for persistence.

Which statement is true concerning cookie persistence?

Cookie persistence allows persistence independent of IP addresses.

Cookie persistence allows persistence even if the data are encrypted from client to pool member.

Cookie persistence uses a cookie that stores the virtual server, pool name, and member IP address in clear text.

If a client's browser accepts cookies, cookie persistence will always cause a cookie to be written to the client's file system.

Assume a virtual server has a ServerSSL profile. What SSL certificates are required on the pool members?

The pool members.SSL certificates must only exist.

No SSL certificates are required on the pool members.

The pool members.SSL certificates must only exist.

The pool members.SSL certificates must be issued from a certificate authority.

The pool members.SSL certificates must be created within the company hosting the BIGIPs.

When configuring a Virtual Server to use an iRule with an HTTP_REQUEST event, which lists required steps in a proper order to create all necessary objects?

create the Virtual Server, create required pools, create the iRule, edit the Virtual Server

create profiles, create the iRule, create required pools, create the Virtual Server

create the Virtual Server, create required pools, create the iRule, edit the Virtual Server

create a custom HTTP profile, create required pools, create the Virtual Server, create the iRule

create required pools, create a custom HTTP profile, create the iRule, create the Virtual Server

Assuming there are open connections through an active system's NAT and a fail over occurs, by default, what happens to those connections?

All open connections will be maintained.

All open connections will be lost.

All open connections will be maintained.

The 'Mirror' option must be chosen on the NAT and the setting synchronized prior to the connection establishment.

Longlived connections such as Telnet and FTP will be maintained while shortlived connections such as HTTP will be lost.

All open connections are lost, but new connections are initiated by the newly active BIG IP, resulting in minimal client downtime.

Under what condition must an appliance license be reactivated?

Licenses generally have to be reactivated during system software upgrades.

Licenses only have to be reactivated for RMAs no other situations.

Licenses generally have to be reactivated during system software upgrades.

Licenses only have to be reactivated when new features are added (IPv6, Routing Modules, etc) no other situations.

Never. Licenses are permanent for the platform regardless the version of software installed.

Which three methods can be used for initial access to a BIG-IP system? (Choose three.)

CLI access to the serial console port

SSH access to the management port

HTTPS access to the management port

CLI access to the serial console port

SSH access to the management port

SSH access to any of the switch ports

HTTP access to the management port

HTTP access to any of the switch ports

HTTPS access to the management port

HTTPS access to any of the switch ports

What is the purpose of provisioning?

Provisioning allows modules that are licensed be granted appropriate resource levels.

Provisioning allows modules that are not licensed to be fully tested.

Provisioning allows modules that are licensed be granted appropriate resource levels.

Provisioning allows the administrator to activate modules in nonstandard combinations.

Provisioning allows the administrator to see what modules are licensed, but no user action is ever required.

The current status of a given pool member is unknown. Which condition could explain that state?

The member has no monitor assigned to it.

The member has a monitor assigned to it and the most recent monitor was successful.

The member has a monitor assigned to it and the monitor did not succeed during the most recent timeout period.

The member's node has a monitor assigned to it and the monitor did not succeed during the most recent timeout period.

The ICMP monitor has been assigned to all nodes. In addition, all pools have been assigned custom monitors. The pool is marked available. If a pool is marked available (green) which situation is sufficient to cause this?

Over 25% of the pool members have had their content updated and it no longer matches the receive rule of the custom monitor. The other respond as expected.

All of the pool member nodes are responding to the ICMP monitor as expected.

Less than 50% of the pool member nodes responded to the ICMP echo request.

All of the members of the pool have had their content updated recently and their responses no longer match the monitor.

Over 25% of the pool members have had their content updated and it no longer matches the receive rule of the custom monitor. The other respond as expected.

Generally speaking, should the monitor templates be used as production monitors or should they be customized prior to use.

Most templates, such as https, should have the receive rule customized to make the monitor more robust.

Most templates, such as http and tcp, are as effective as customized monitors.

Monitor template customization is only a matter of preference, not an issue of effectiveness or performance.

Most templates, such as https, should have the receive rule customized to make the monitor more robust.

While some templates, such as ftp, must be customized, those that can be used without modification are not improved by specific changes.

You have a pool of servers that need to be tested. All of the servers but one should be tested every 10 seconds, but one is slower and should only be tested every 20 seconds. How do you proceed?

It can be done by assigning one monitor to the pool and a different monitor to the slower pool member.

It cannot be done. All monitors test every five seconds.

It can be done, but will require assigning monitors to each pool member.

It cannot be done. All of the members of a pool must be tested at the same frequency.

It can be done by assigning one monitor to the pool and a different monitor to the slower pool member.

When can a single virtual server be associated with multiple profiles?

Often. Profiles work on different layers and combining profiles is common.

Never. Each virtual server has a maximum of one profile.

Often. Profiles work on different layers and combining profiles is common.

Rarely. One combination, using both the TCP and HTTP profile does occur, but it is the exception.

Unlimited. Profiles can work together in any combination to ensure that all traffic types are supported in a given virtual server.

You have created a custom profile named TEST2. The parent profile of TEST2 is named TEST1. If additional changes are made to TEST1, what is the effect on TEST2?

Some of the changes to TEST1 may propagate to TEST2.

All changes to TEST1 are propagated to TEST2.

Some of the changes to TEST1 may propagate to TEST2.

Changes to TEST1 cannot affect TEST2 once TEST2 is saved.

When TEST1 is changed, the administrator is prompted and can choose whether to propagate changes to TEST2.

If a client's browser does not accept cookies, what occurs when the client connects to a virtual server using cookie persistence?

The connection request is loadbalanced to an available pool member.

The connection request is not processed.

The connection request is sent to a pology server.

The connection request is loadbalanced to an available pool member.

The connection request is refused and the client is sent a 'server not available' message.

What is the purpose of MAC masquerading?

to minimize connection loss due to ARP cache refresh delays

to minimize ARP entries on routers

to minimize connection loss due to ARP cache refresh delays

to allow both BIGIP devices to simultaneously use the same MAC address

The incoming client IP address is 195.64.45.52 and the last five connections have been sent to members A, C, E, D and B. Given the virtual server, pool, and persistence definitions and statistics shown in the above graphic, which member will be used for the next connection?

It cannot be determined with the information given.

Assume a virtual server has a ServerSSL profile. What SSL certificates are required on the BIG-IP?

No SSL certificates are required on the BIG-IP.

The BIG-IP's SSL certificates must only exist.

The BIG-IP's SSL certificates must be issued from a certificate authority.

The BIG-IP's SSL certificates must be created within the company hosting the BIG-IPs.

Assume a virtual server is configured with a ClientSSL profile. What would the result be if the virtual server's destination port were not 443?

As long as client traffic was directed to the alternate port, the virtual server would work as intended.

SSL termination could not be performed if the virtual server's port was not port 443.

Virtual servers with a ClientSSL profile are always configured with a destination port of 443.

As long as client traffic was directed to the alternate port, the virtual server would work as intended.

Since the virtual server is associated with a ClientSSL profile, it will always process traffic sent to port 443.

A BIG-IP Administrator needs to restore an encrypted UCS archive from the command line using the TMSH utility.Which TMSH command should the BIG-IP Administrator use to accomplish this?

load/sys ucs <filepath> passphrase

load/sys config file <filepath> passphrase

load/sys config file <filepath>

load/sys ucs <filepath> no-license

On the VCMP system, a BIG-IP host administrator imports a new ISO image into the host's /shared/images folder. The new ISO images that reside on the vCMP host are available for installation on the guest. How should the BIG-IP Administrator install one image from within the guest?

Run the following command on host tmsh install sys software block-device-image image_name volume < volume_name>

Install the new software on the host and wait for it to automatically be installed on all guests.

Run the following command on guest tmsh install sys software block-device-image image_name volume < volume_name>

Run the following command on guest tmsh install sys software image image_name volume < volume_name>

Run the following command on host tmsh install sys software block-device-image image_name volume < volume_name>

A BIG-IP Administrator configures a Virtual Server. Users report that they always receive a TCP RST packet to the BIG-IP system when attempting to connect to it. What is the possible reason for this issue?

The virtual server Type is set to Reject

The virtual server Type is set to Internal

The virtual server Type is set to Reject

The virtual server Type is set to Drop

The virtual server Type is set to Stateless

A BIG-IP Administrator needs to remove a pool specific health monitor. There is a pool named Best Pool with two members, one named Best pool member and one named Best pool member2. In the Local Traffic section of the administrative GUI, which stops should the BIG-IP Administrator take to remove a pool level monitor?

Pool > Pool List> Best Pool > Health Monitors

Pool > Pool List > Best Pool > Members > Health Monitors

Nodes > Node List> Best _pool_memberl > Heath Monitors

Monitors > Monitor Name> Instances

Pool > Pool List> Best Pool > Health Monitors

Which statement is true concerning SSL termination?

A virtual server that has both ClientSSL and ServerSSL profiles can still support cookie persistence.

Decrypting traffic at the BIG-IP allows the use of iRules for traffic management, but increases the load on the pool member.

When any virtual server uses a ClientSSL profile, all SSL traffic sent to the BIG-IP is decrypted before it is forwarded to servers.

If a virtual server has both a ClientSSL and ServerSSL profile, the pool members have less SSL processing than if the virtual server had only a ClientSSL profile.

A site wishes to perform source address translation on packets from some clients but not others. The determination is not based on the client's IP address, but on the virtual servers their packets arrive on. What could best accomplish this goal?

Some virtual servers could be associated with SNAT pools and others not associated with SNAT pools.

A SNAT for all addresses could be defined, and then disable the SNAT processing for select VLANs.

Some virtual servers could be associated with SNAT pools and others not associated with SNAT pools.

The decision to perform source address translation is always based on VLAN. Thus, the goal cannot be achieved.

The decision to perform source address translation is always based on a client's address (or network). Thus, this goal cannot be achieved.

Assume a client's traffic is being processed only by a NAT; no SNAT or virtual server processing takes place. Also assume that the NAT definition specifies a NAT address and an origin address while all other settings are left at their defaults. If a client were to initiate traffic to the NAT address, what changes, if any, would take place when the BIG-IP processes such packets?

The source address would not change, but the destination address would be translated to the origin address.

The destination address would not change, but the source address would be translated to the origin address.

The source address would not change, but the destination address would be translated to the NAT's address.

The destination address would not change, but the source address would be translated to the NAT's address.

A standard virtual server is defined with a pool and a SNAT using automap. All other settings for the virtual server are at defaults. When client traffic is processed by the BIG-IP, what will occur to the IP addresses?

Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address.

Traffic initiated by the pool members will have the source address translated to a self-IP address but the destination address will not be changed.

Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address.

Traffic initiated by selected clients, based on their IP address, will have the source address translated to a self-IP address but the destination will only be translated if the traffic is destined to the virtual server.

Traffic initiated to the virtual server will have the destination address translated to a pool member address and the source address translated to a self-IP address. Traffic arriving destined to other destinations will have the source translated to a self-IP address only.

Which VLANs must be enabled for a SNAT to perform as desired (translating only desired packets)?

The SNAT must be enabled for the VLANs where desired packets arrive on the BIG-IP.

The SNAT must be enabled for all VLANs.

The SNAT must be enabled for the VLANs where desired packets leave the BIG-IP.

The SNAT must be enabled for the VLANs where desired packets arrive on the BIG-IP.

The SNAT must be enabled for the VLANs where desired packets arrive and leave the BIG-IP.

F5 201 Practice Test 5 - Free Online Exam Prep & Questions

A BIG-IP Administrator applied the latest hotfix to an inactive boot location by mistake, and needs to downgrade back to the previous hotfix.

What should the BIG-IP Administrator do to change the boot location to the previous hotfix?

Become a Premium Member for full access

Unlock Premium Member

F5 201 Practice Test 5

Question

F5 201 Practice Tests

Practice Tests